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Software Vendors’ Audit 
Requests Irk IT Managers 


NEWSPAPER 


Data Centers Get a 


eta 


Ultradense server racks, disaster recovery requirements 
and IP networks are forcing big changes in the way new 
data centers are built. By Gary H. Anthes PAGE 23 
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| meet Sarbanes-Oxley 


| ments, according to sev- 





Some view Sarb-Ox 
tie-ins as a ploy; others 


| see nothing amiss 


BY THOMAS HOFFMAN 
LAS VEGAS 


| A number of software vendors 


are requesting that large cor- 


| porate customers conduct 
| self-audits against their 
| software usage, allegedly jl}, 


to help the suppliers 
regulatory require- 


eral attendees at an IT 


A corporate purchasing di- 


| rector at a large Midwestern 
| financial services company 
who requested anonymity said | 


his organization recently re- 


GM, Boeing 


Push Identity 
Management 


Expect single-sign-on 
rollouts to lower costs, 


| improve access toapps | 


| ogy officer. 


BY JAIKUMAR VIJAYAN 

DENVER 

General Motors Corp. plans to 
migrate its end-user identity 
management services to a sin- 
gle global system over 


maps sem eye 
coverage, visit 
Na eR Co 
tet Te CLL 
EB 4018) 


| asset management conference 
| held here last week. 


ceived a letter from Sunny- 


| vale, Calif.-based Interwoven 


Inc. requesting that the com- 


| pany conduct a self-audit of 


its use of TeamSite, Interwo- 
ven’s enterprise content man- 
agement system. 

The letter said the audit 
was required to help Interwo- 
ven meet the Sarbanes-Oxley 

Act’s compliance man- 
\ dates but didn’t men- 
tion which regulatory 
requirements had to 
be met, said the pur- 
chasing manager. “It 
seemed like a soft-step 


| approach to get us to conduct 


an audit,” he said. 
His company ended up con- 


| ducting the audit. It then re- 
| viewed the results with its le- 


gal department and informed 
Audit, page 51 


| the consolidated identity man- 
| agement system will enable 

| universal application access 

| and single-sign-on capabilities 
| for about 500,000 end users, 

| including GM employees and 


workers at suppliers, contrac- 


| tors and other business part- 


ners, according to Tony Scott, 
the company’s chief technol- 


The new infrastructure will 


| replace numerous silos of 


identity information at GM 
and will play a crucial role in 
its ongoing move toward a 


global supply chain and 
the next several years as iby]! manufacturing model, 


part of a broad initiative 
to improve IT efficiency 
and reduce the automak- 
er’s operational costs. 
When it’s completed, 


Ss 
PAGE 10 


Scott said at the Digital 
Identity World confer- 
ence here last week. 
“The supplier and de- 
ID Management, page 14 





YOU MAY NOT HAVE TIME TO STUDY 
THE TCO OF WINDOWS AND LINUX, 
BUT THE YANKEE GROUP DOES. 





“For midsized and large organizations, a significant 
Linux deployment will neither be free nor easily 
accomplished. In fact, respondents at large 


organizations reported that a wholesale switch to 


Linux from Windows’ or Unix would significantly 


increase TCO for the forseeable future.” 


—Laura DiDio, The Yankee Group, April 2004 
Linux, Unix, and Windows TCO Comparison 


The Yankee Group, a global research and consulting firm, concluded that 
a significant switch to Linux from Windows or Unix could cost three to four 
times as much without delivering tangibly better performance or business 
value. These findings are based on a non-sponsored worldwide survey of 1,000 


IT administrators and C-level executives in midsized and large enterprises. 


To get the full study, visit microsoft.com/getthefacts 


Microsoft® : 


Window 
Server System 


©2004 MicrosoftCorporation. All rights reserved. Microsoft, Windows, the Windowslogo, and Windows Server System are either registered trademarks or trademarks of Microsoft 
Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners 
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Date: February 14, 2005 
San Francisco 
Visit ca.com/etrust/workshop 


for information and to register to win. 


It takes an integrated security solution to make sure the 
right people have the right access at the right time. 


eTrust’ Identit 1 Access Management Solutions 


These days, a vital aspect of security management is providing customized 
levels of access for countless employees and partners while also protecting 
your customers from identity theft. That’s one complicated job-and one that 
can be made much easier with CAs eTrust Identity and Access Management 
(IAM) Solutions. They enhance security and reduce costs by automating 
processes and enabling self-administration, in addition to providing policy-based 
cross-platform protection for web, mainframe, and application resources 
enterprise wide. To find out how CAs IAM solutions can improve your business, 
attend one of our workshops. ca.com/etrust/workshop 
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OpenVMS Survives and Thrives 


In the Technology section: The OpenVMS 
operating system gets a new lease on life 
as it moves to 64-bit Itanium, and for users 
like Sony’s Daniel Sanchez Reina, its relia- 
bility makes it a no-brainer. Page 28 


H.OLOZ 


Outsourcing Tuneup 

In the Management section: Do last 
year’s outsourcing decisions support 
this year’s business strategy? Ask these 
10 questions to find out. Page 37 
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E-voting software can now be 
checked for authenticity by 
election officials, but only if 

it has yet to be installed. 


Open standards are key to 
the success of on-demand 
systems, IT managers say. 


Starwood Hotels signs on HP 
to develop a new reservation 
system and replace IBM as its 
outsourcing vendor. 


Information life-cycle man- 
agement needs business buy- 
in to succeed, IT execs say at 
Storage Networking World. 


Q&A: Dell CEO Kevin Rollins 
talks about the vendor’s 
evolving relationship with 
EMC and emerging standards. 


BEA releases a framework 
that’s designed to help Web- 
Logic users build service- 
oriented architectures. 


Symantec makes a play for a 
broader market with its “in- 
formation integrity” strategy. 


Global Dispatches. German 
companies eye Linux but leave 
the door open for Windows. 


Wireless rollouts frustrate 
some IT managers, who say 
better deployment and man- 
agement tools are needed. 


The Toledo school system 
may resurrect a stalled 
PeopleSoft implementation. 


Microsoft’s LCS 2005 soft- 
ware could boost interest in 
corporate instant messaging. 
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: 23 Data Centers Get a 
Makeover. Technology 
changes are affecting both 
the role of the data center 
and how it’s designed. 


: 30 QuickStudy: Error Checking 


and Correction. The process 
of detecting errors during the 
transmission or storage of 
digital data and correcting 
them automatically usually 
involves sending or storing 
extra bits of data according 
to specified algorithms. 


: 32 Security Manager’s Journal: 


Lack of Control Becomes 
Nightmare. Not having com- 
plete control of network secu- 
rity operations is a nightmare 
for C.J. Kelly, and now she has 
to find out what’s really going 
on in the network. 
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: 40 Watch Your Weblog. Dangers 
: lurk amid corporate blogs, 
and sponsoring or creating 
one is rife with legal liabili- 
ties. Here are some precau- 
tions you should take. 


: 42 Think Tank. A deeper dive 


into Alinean’s ROI calcula- 
tions; an unorthodox exami- 
nation of the skills the “gamer 
generation” will bring to the 
workplace; and a look at IT 
buyer intentions. 


: 43 Career Watch. The IT class of 


’04 is in the money — relative- 
ly speaking; growth gains on 
cost control as a corporate fo- 
cus; and tough times continue 
for rank-and-file IT workers. 


OPINIONS 


8 


On the Mark: Mark Hall asks 
you to put yourself in the 
shoes of Microsoft’s CIO for 
IT, whose bosses demand that 
he use alpha-stage products in 
his production environment. 


Don Tennant thanks IT pro- 
fessionals for their persever- 
ance and for what that at- 
tribute has enabled them to 
contribute to our lives. 


Dan Gillmor has a prediction 
about the election: It’s going 
to be technologically messy. 


Michael H. Hugos has found 
that the best way to help his 
company thrive is to keep sys- 
tems simple and automate just 
the routine stuff. 


34 Bruce Schneier says that the 


ultimate answer to security 
vulnerabilities is to make the 
software vendors liable for 
the holes in their products. 


44 Paul Glen has a problem with 


people who propose solutions 
without first articulating the 
problem. IT should be able to 
help its clients eliminate such 
fuzzy thinking, he says. 


52 Frankly Speaking: Frank 


Hayes wonders what will hap- 
pen when the bubble of faith 
in offshoring eventually bursts. 
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Products to Prevent Data Theft 
SECURITY: Danny Lieberman of Open Solu- 
tions Israel offers a guide to buying technol- 
ogy to safeguard your critical information. 


© QuickLink 49618 
Modify User Behavior 


iT MANAGEMENT: CA architect Stevie Sacks 
outlines how to cut IT costs by making busi- 
ness units accountable for their consumption 
of resources. @ QuickLink 50064 


E-voting Updates 

NEWS: How is electronic voting working in 
this election? Stay up to date this week on all 
the latest news. @ QuickLink a4760 


ONLINE 
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Breaking News 

© QuickLink a1510 
Newsletter 
Subscriptions 

© QuickLink 21430 
Knowledge Centers 

© QuickLink a2570 
The Online Store 

@ QuickLink a2420 


What's a QuickLink? 


our Web site. Also, at the end of 
each story, a QuickLink to that 

story online facilitates sharing it 
with colleaques. Just enter any 
of those codes into the Quick- 

Link box, which is at the top of 

every page on our site. 
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AT DEADLINE 


Textron, CSC Sign 
Outsourcing Deal 


Computer Sciences Corp. said it 
has signed an IT outsourcing con- 
tract with Textron Inc. that’s ex- 
pected to be worth about $1.1 bil- 
lion over the next 10 years. CSC 
will manage the Providence, R.I.- 
based conglomerate’s global data 
center, help desk and network 
operations, plus its servers and 
desktop systems. About 250 IT 
workers at Textron will be offered 
jobs at CSC as part of the deal. 


Oracle Sets Release 
Date for New Apps 


Oracle Corp. said it plans to ship 
the latest version of its ERP appli- 
cations next Monday, although a 
spokeswoman noted that logisti- 
cal issues could delay the release 
by a few days. Oracle announced 
the E-Business Suite 111.10 soft- 
ware at its OpenWorld conference 
in early September and has al- 
ready released some modules, 
including its CRM applications. 


Revenue Down at 
i2; Sales, Profits Up 


Supply chain software vendor i2 
Technologies Inc. reported a 5% 
dip in third-quarter revenue com- 
pared with its year-earlier results. 
But Dallas-based i2 said its soft- 
ware license sales rose 21% year 
over year to $17 million. Profits 
more than doubled, it said. 


i2°S Q3 FINANCIAL RESULTS 


Cybercrime Arrests 
Net 28 Suspects 


The U.S. Secret Service said it 
has arrested 28 people from eight 
U.S. states and six countries for 
alleged involvement in a global 
cybercrime ring. The Secret Ser- 
vice claimed that the suspects 
had collectively trafficked in at 
least 1.7 million stolen credit card 
numbers and caused $4.3 million 
in losses among banks. 


NEWS 


Officials can match digital signatures to 
reference copies, but initial use is limited 





BY DAN VERTON 
EDERAL OFFICIALS last 
week released a set of 
software files submit- 
ted by five vendors of 

e-voting systems and voting 


| verification tools, saying that 


election officials can use the 
code and related digital signa- 
tures to check whether the 
software they have bought has 
been modified without their 
knowledge. 

But the so-called reference 
data set issued by the National 
Institute of Standards and 
Technology will likely be of 
little use to state officials for 
verifying the integrity of 
e-voting systems being used in 
tomorrow’s election. And the 
future value of the files could 
be limited for states that have 
customized their e-voting 
software. 

The National Software Ref- 
erence Library’s (NSRL) Web 
site said the files typically can 
be used only to check software 
that has yet to be installed on 
a voting machine. The notice 
added that “with limited ex- 
ceptions,” e-voting software 
can’t generate digital signa- 
tures after it has been installed. 

The NSRL notice also said 
that election authorities using 
software that has been legiti- 
mately altered won't be able to 
use the reference data set to 
compare digital signatures. 
Only signatures derived from 
the identical product releases 
submitted by the five vendors 
are available on the NSRL’s 
Web site. 

Vendors that had provided 
software to the NSRL as of 
Oct. 22 include Diebold Inc., 
Election Systems & Software 
Inc., Hart InterCivic Inc., Se- 
quoia Voting Systems Inc. 
and VoteHere Inc. Oakland, 
Calif.-based Sequoia said it 
has made several submissions 
over the past two weeks. 








Bellevue, Wash.-based Vote- 
Here said in late June that it 
had submitted a reference 
source-code implementation 
for inclusion in the NSRL. 
Omaha-based ES&S made a 
similar announcement in Au- 
gust, and Austin-based Hart 
InterCivic followed suit in 
mid-October. North Canton, 
Ohio-based Diebold couldn’t 
be reached for comment. 


Facing Skepticism 

The submissions were made 
after the U.S. Election Assis- 
tance Commission called on 
all e-voting software vendors 
to provide code to the NSRL. 
In a letter dated July 13, com- 
mission Chairman DeForest 
Soaries Jr. said having access 
to the code would “facilitate 
the tracking of software ver- 





Feds Issue ‘lest Copies 
Of E-voting Software 


sion usage.” Some observers 
have claimed that vendors have 
installed patches and upgrades 
prior to elections without let- 
ting officials inspect the code 
first. Sequoia spokesman Alfie 
Charles said the NSRL is stor- 
ing “pristine copies” of vendor- 
submitted software “to help 
prepare for the inevitable chal- 
lenges that take place whenev- 
er there are close elections.” 

But Avi Rubin, a professor at 
Johns Hopkins University who 
has criticized e-voting securi- 
ty controls, called the NSRL 
“smoke and mirrors.” Rubin 
said that if e-voting software 
“is already rigged, storing the 
[digital signature] hashes only 
guarantees that the malicious 
code will be there if the hash- 
es match.” 

Kim Alexander, president of 
the California Voter Founda- 
tion, called the vendor sub- 
missions good news, but only 
if there are no last-minute 
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software provided to 
them by vendors.” 


changes to the software. “If 
there are technical problems 
with software vote counts on 
election night, it’s possible 
that vendors will, as they have 
in the past, install patches or 
upgrades to get the vote count 
started again,” she said. 
Election officials will have 
to keep a public audit log of all 
software testing and installa- 
tions to ensure that there’s no 
appearance of impropriety, 
Alexander added. @ 50423 


Officials Defend Systems, Despite Early E-voting Problems 


SINCE early voting began on Oct. 
18 in Florida and at least seven 
other states where tight presi- 
dential contests are expected, 
voters have reported hundreds of 
problems to the Election Incident 
Reporting System, some of which 
resuited from technical glitches in 
the computers being used to sup- 
port the voting process. 

The incident reporting system 
is an online database set up by 
grass-roots organizations, in- 
cluding Verified Voting Founda- 
tion Inc. and Computer Profes- 
sionals for Social Responsibility. 
Of the 666 incidents reported in 
Florida as of last Wednesday, 33 
were linked to alleged malfunc- 
tions of e-voting systems in nine 
counties. In Broward County, for 
example, some voters claimed 
that touch-screen systems pre- 
sented incomplete ballots. 

Alia Faraj, a spokeswoman for 
Florida Deputy Secretary of 


State Dave Mann, said that con- 

trary to news reports, there have 
been no problems related to any 
of the touch-screen e-voting sys- 
tems being used in the state dur- 
ing the early voting period. “The 

touch-screen systems have been 
operating as planned,” Faraj said. 

The only problems, she 
added, involved laptop PCs that 
were used to check voter-regis- 
tration rolls in some counties. 
Those problems were fixed im- 
mediately by a simple reboot of 
the laptops, Faraj said. 

Will Doherty, executive direc- 
tor of the San Francisco-based 
Verified Voting Foundation, said 
that despite Faraj's characteriza- 
tion of the laptop malfunctions 
as minor, his organization is 
aware of dozens of Florida vot- 
ers who were turned away from 
the polls “because of that minor 
system crash.” 

Doherty also said there have 


been multiple reports of touch- 
screen calibration problems in 
Florida. Some voters have said 
that when they touched the 
screen next to their candidate’s 
name, the screen highlighted the 
name of the opposing candidate, 
according to Doherty. 

In addition to the Florida coun- 
ties, localities in Colorado, Ten- 
nessee and Texas, as well as two- 
thirds of Georgia's counties, have 
experienced connection prob- 


> lems between their early voting 


sites and the central servers that 
hold voter registration databas- 
es, said VotersUnite, a nonparti- 


> san voter advocacy group. 


Alfie Charles, a spokesman for 
Sequoia Voting Systems, said it's 


- important not to confuse a minor 
: glitch in a voter-registration sys- 

: tem with voting problems. All 

- touch-screen systems are report- 
: edly operating normally, he said. 


~- Dan Verton 
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Tech Standards Set Tone for On-Demand Systems 


IT managers cite need for application 
flexibility and broader data integration 





BY PATRICK THIBODEAU 
NEW YORK 
When The Museum of 
Modern Art undertook an 
$858 million renovation and 
expansion project eight years 
ago, it gave CIO Steve Peltz- 
man a blank canvas for rebuild- 
ing its data center and systems. 
Peltzman said last week that 
he’s making the most of the 
opportunity. His staff is re- 
moving IT silos and integrat- 
ing systems, with the goal of 
creating what he described as 
an “Amazon-like” flow of in- 
formation that lets MOMA’s 
business users access data no 
matter where it’s stored. 
Peltzman spoke at a forum 
held here by IBM to mark the 
second anniversary of its 
on-demand computing initia- 
tive. Other vendors, such as 
Hewlett-Packard Co. with its 
adaptive enterprise strategy, 
also are championing the use 
of highly integrated and flexi- 
ble systems. But underpinning 
the marketing terms is some- 
thing IT managers have un- 
derstood for years: the need to 
support open standards. 
“Anybody who realizes that 
integration has got to be the 
way, and who is dealing with a 
lot of legacy information, it’s 
got to be obvious [to them] 
that open standards is going to 
make that easier,” Peltzman 
said in an interview. 
Peltzman and other users 


rs a 
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physical renovation to remove IT 
silos and integrate systems. 





said adherence to open tech- 
nologies such as XML, J2EE 
and SOAP is critical. But many 
added that vendors continue 
to knock on their doors with 


| proprietary products in hand. 


Chris Dorsey, CIO at Chase- 


| Pitkin Home & Garden, a divi- 


sion of Wegmans Food Mar- 
kets Inc. in Rochester, NY., is 
building an integrated inven- 
tory and order management 


system. The ability to share in- | 


formation and improve busi- 
ness intelligence is central to 
the project, he said. 

But Dorsey noted that one 
vendor pitched an order entry 





| system with a graphical user 


interface that looked as if it 


| used Java and XML when in 
| fact it didn’t. The vendor put 
| “window dressing on it to 

| make it appear to be more 


open-standards-based and 
user-friendly, when in reality, 


| it isn’t that flexible or cus- 


tomizable,” Dorsey said. 


Gaining Leverage 
Users said that in many cases, 


| they’re willing to give up the 
| functionality that’s included in 


a proprietary product because 
one built on open standards 
gives them more leverage with 
technology vendors. 

The ability to “pluck out” 
applications that aren’t meet- 
ing business needs “gives me 





| leverage and also challenges 


vendors in a different kind of 


| way,” said Sherra Pierre, vice 


president of information ser- 


group that produces Sesame 


| Street and other educational 
| programming for children. 


“IT is no longer about build- 


| ing specific applications; it re- 


ally has become more fluid in 

its delivery,” Pierre said. 
David Balik, president of 

General Glass International 


| Corp. in Secaucus, NJ., said 


he’s pleased with his IBM sys- 
tems but doesn’t feel joined at 
the hip with the vendor. “An 
awful lot of the applications 
are quite portable to other 
places, so the ‘gotcha’ factor, I 
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think, is a lot less,” Balik said. 
Even so, IBM’s on-demand 


| effort is making it easier for IT 


managers to sell open-source 
and open standards concepts 


| to business executives, said 

| Robert Rosen, who heads the 

| vices at Sesame Workshop, the | 
New York-based nonprofit 


Share user group in Chicago. 
MOMA is scheduled to 
open its revamped facility on 
Nov. 20, but Peltzman said the 


| work to integrate its depart- 


mental systems will continue 


| for months to come. The mu- 
| seum is using IBM’s iSeries 

| servers and WebSphere soft- 

| ware as part of the project, 

| which involves developing a 

| system architecture that en- 

| ables all its databases to share 
| information. For instance, the 


museum is linking its mem- 


| bership and retail systems to 


help it reach out to potential 


| members. @ 50421 





Starwood Taps Hewlett-Packard for 
System Development, Outsourcing Deal 


Hotel chain plans 
phaseout of its 
IBM mainframes 


BY PATRICK THIBODEAU 

IT flexibility has become vital 
to Starwood Hotels & Resorts 
Worldwide Inc. And to try to 
make that a reality, Starwood 
has immersed itself in a proj- 
ect called Fusion that tightly 
couples its IT plans with busi- 
ness needs and includes a new 
reservation system that will 
link many of the company’s 
hospitality services and make 
them more accessible online. 

Starwood iast week said 
that it has signed a seven- 
year, $100 million technology 
and outsourcing deal with 
Hewlett-Packard Co., which 
will heip develop the J2EE- 
based reservation system and 
then manage it while provid- 
ing a variety of other IT ser- 
vices to White Plains, N-Y.- 
based Starwood (see box). 

HP is replacing IBM as Star- 
wood’s outsourcing vendor, 
and the decision to build a ser- 
vice-oriented architecture for 
the new reservation system 
means that the hospitality 





company will gradually end 


| its use of the IBM mainframes 


that run its existing Cobol- 
based applications. 
Tom Conophy, Starwood’s 


| chief technology officer, said 


the goal is to create a system 
that can handle room rentals 
plus a range of other services, 
such as spa reservations for 
hotel guests. In addition, im- 
proved integration of back- 
end systems will allow for 
more-sophisticated credit 
card processing functions, 

he said. 


Handle Future Growth 
Starwood’s IT team looked at 
IBM’s ability to run Linux on 
the mainframe. But Conophy 
said the company’s long-term 
direction of its IT architecture 
hinged on moving from a 
mainframe environment to 
lower-cost Unix and Linux 
systems that could easily in- 
crease in size to handle future 
business growth. 

Conophy said the new sys- 
tem should help Starwood 
save $15 million to $20 million 
annually in IT operating costs. 

As part of the project, Star- 
wood will install HP’s Itani- 





HP will handle the 
following IT tasks 
for Starwood: 


OPERATE the company’s core 
computing complex and its 
messaging systems. 


PROVIDE network manage- 
ment and multivendor server 
support services. 

ASSIST with application devel- 


opment and host Starwood's 
Web sites. 


BUILD an upgraded disaster 
recovery facility. 


| um-based Superdome high- 


end systems running a mix of 
HP-UX and Linux. HP-UX 
will be used on the company’s 
database servers, and Cono- 
phy said the Unix operating 
system is well designed to 
work with the Superdome 
hardware — a strength that it 
has over Linux. Starwood also 
plans to use HP’s x86-based 
ProLiant servers. 

The company, which owns 
Sheraton Hotels & Resorts, 
Westin and other hospitality 
chains and operates 738 hotels 








| in 82 countries, outsourced its 


data center operations to IBM 
six years ago. IBM declined to 
comment about the new con- 


| tract with HP, which Starwood 
| negotiated when the deal with 


IBM came up for renewal. 
IBM is as capable as HP is in 


| providing technology, Cono- 
| phy said. He added that the 


decision to switch to HP as an 


| outsourcer was based on its 


willingness to be more flexible 
on the terms of the managed 


| services contract than IBM 
| would be. 


Among the issues that 
Conophy cited was the ability 
to do third-party benchmark- 
ing. He said he wanted to be 
able to use a third-party firm 
to help compare Starwood’s 


| IT service-level agreements 


against marketplace trends 
over the course of the con- 
tract. HP was more willing to 
allow periodic benchmarking 
than IBM was, he said. 

Stan Lepeak, an analyst at 
Meta Group Inc., said the use 
of benchmarking during an 


| Outsourcing contract could re- 


sult in cost reductions for 


| users or commitments by ven- 
| dors to improve performance. 


And as more and more data 


| center systems are commodi- 


tized, such benchmarking is 


| becoming easier to do, Lepeak 


said. @ 50420 
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Business Execs Must 
Learn to Embrace ILM 


But convincing them that ILM can cut 


costs and ease data flow is a challenge 





BY LUCAS MEARIAN 
ORLANDO 
ORPORATE IT opera- 
tions are moving 
ahead with efforts to 
develop information 
life-cycle management (ILM) 
schemes that can efficiently 
and cost-effectively store data 
so that its level of availability 
is consistent with its impor- 
tance to the business. 

But users at last week’s Stor- 
age Networking World confer- 
ence here maintained that be- 
fore a company can establish 
an ILM policy or begin a 
search for products that can 
migrate data across tiers of 
storage, the business side must 
take ownership of the project 
and define the importance of 
different types of data. 

Paul Seay, chief infrastructure 
architect at Northrop Grum- 
man Corp. in Los Angeles, said 
his company is focusing on 
convincing business groups of 
the potential cost savings of 
storing data on the medium 
that’s most appropriate for it, 
based on its importance. 





“We’re focusing on the cul- 


| tural problem first,” Seay said. 


Seay declared that standards 
should be established to iden- 
tify data on open systems, just 
as standards were developed 
in the mainframe world to 
identify data sets. XML could 
help with the tagging of meta- 
data, but a copy of the applica- 
tion that created the data 
would have to be maintained 
in order to read it in the future, 
which brings up digital rights 





management issues, he said. 
Ken Walters, senior director 
of enterprise platforms at the 
Public Broadcasting Service in 
Alexandria, Va., agreed that 
management must agree to 
create the necessary policies 
and procedures before ILM 
technology can be installed. 
“ILM is a must-do,” said Rod 
Mueller, manager of technolo- 
gy and infrastructure at Stam- 
ford, Conn.-based Internation- 
al Paper Co. “ILM gives me a 
huge competitive advantage by 
reducing the cost of storage.” 
Mueller said he began pitching 
the scheme to the company’s 


EMC ‘Virtualizes’ the Network 


ORLANDO 

EMC last week unveiled its long- 
anticipated storage virtualization 
technology, which the company 
said lets users manage its arrays 
- and high-end boxes from major 
competitors - through a single 
interface. 

“This is finally EMC giving in to 
the fact that storage is going to 
become virtualized,” said Nancy 
Hurley, an analyst at Enterprise 
Strategy Group. 


EMC said at Storage Network- 
ing World here that its product, 
called Storage Router, is a com- 
bination of its own firmware and 
s0-Called intelligent switches and 
directors from Cisco Systems 
Inc., Brocade Communications 
Inc. and McData Corp. 

The switches are among a 
new breed of storage technology 
that uses application-specific in- 
tegrated circuits to crack open 
data packets, read the informa- 


business units after 
learning about ILM at 
last fall’s conference. 
| Today, International 
Paper’s seven units are 
evaluating the validity 
of their data based on 
its age and how often 
it’s used, he said. 
Mueller said chang- 
ing mind-sets within 
the business has been 
difficult because man- 
agers consistently re- 
quire that data be stored on 
top-tier arrays. But he has 
found that once chargeback for 
storage costs enters the con- 
versation, attitudes change. 
Steve Duplessie, an analyst 
at Enterprise Strategy Group 
Inc. in Milford, Mass., said 
technologies pitched today as 
ILM are actually point prod- 
ucts designed for specific 





tion inside and route the data. 

Robert Sadowski, a product 
marketing manager at EMC, said 
that the company will eventually 
write its code to a standard API 
called Fabric Application Inter- 
face, which is being developed 
by the Washington-based Inter- 
National Committee for Informa- 
tion Technology Standards. 

EMC first tipped its hand about 
Storage Router at its annual user 
conference last April, outlining 
plans to release a beta version to 
users the following quarter. The 


“ILM GIVES ME 
FM Melt 
petitive advan- 
tage,” says 
Rod Mueller of 
Tare eir 
Paper Co. 


www.computerworld.com 


functions such as data 
migration from sec- 
ondary storage to tape. 
“ILM is still more hall- 
way discussion than 
practical technology,” 
he said. 
John Halamka, CIO 
at CareGroup Inc., a 
Boston-based operator 
of six hospitals, has 
developed an ILM 
strategy for his lOOTB 
storage-area network 
so that it automatically mi- 
grates patient documents and 
medical images between tiers 
of storage consisting of EMC 
Corp. Symmetrix, Clariion and 
Centera arrays. Still lacking is 
the ability to manage data 
movement at the point of cre- 
ation by business applications 
like SAP, Oracle or Sybase. 

| @ 50394 


router, in beta now, will ship in 
the first half of 2005. 

The product will work with 
EMC's Symmetrix and Clarriion 
products as well as Hitachi Data 
Systems Corp.'s 9900 series, 
Hewlett-Packard Co.'s EVA line 
and IBM's Enterprise Storage 
Server, also known as Shark. 

EMC said that Storage Router 
can perform port-level process- 
ing at a rate of 30,000 to 
40,000 1/Os per second and 
is highly scalable. 

- Lucas Mearian 





Dell CEO Says EMC Pact Could Expand; Merger Unlikely 


BY LUCAS MEARIAN 
Dell Inc. has been a reseller and 
manufacturer of EMC Corp. 
low-end and midrange arrays 
since 2002. As the partnership 
grows and Dell’s annual storage 
revenue passes the $1.5 billion 
mark, Dell CEO Kevin Rollins 
must clearly define his compa- 
ny’s role as a partner 
and potential competi- 
tor to EMC. 

At Storage Network- 
ing World last week, 
Rollins spoke with Com- 
puterworld about Dell’s 
evolving relationship 
with EMC and about his 
plans to support the 


emerging Internet SCSI stan- 
dard to help users manage in- 
creasingly complex storage-area 
networks. 


How much is Dell competing with 
EMC as you creep up the storage 
stack and EMC creeps down the 
stack? Not too much, because 
most of our business 
will be in the small-to- 
medium business space. 
That’s why we did the 
partnership. 


Are there any plans to 
expand the agreement to 
have Dell manufacture 
EMC’s high-end systems? 





Probably. Well, I don’t know. 
Maybe. It’s so problematic, be- 
cause if they sell them through 
any channel partners, it’s hard 
for those channel partners to 
buy from us. Up until this point 
in time, it hasn’t made any 
sense. 


Are Dell and EMC potential merger 
candidates? I don’t think so. 
The partnership came about 
because we've got the access to 
markets, and [they’ve] got the 
technology but can’t ramp it. 
We haven't stated [a merger] 
as a goal. And I think EMC is 
very happy staying indepen- 
dent. We don’t need to join 


each other, and if we did, I’m 
not sure what the benefit 
would be. 


How is Dell working on standards 
other than through its member- 
ship in standards bodies? We’re 
not only on them... we’re try- 
ing to drive them. It’s clear 
that as we do that, there are 
two or three major players that 
don’t want that to happen very 
fast. 


Why are some vendors hoping to 
slow down the process? They 
have their own proprietary 
technology, and it’ll force them 
to give that up on behalf of an 





industry standard, which will 
mean customers will have 
more choice and can shift from 
vendor to vendor or bring 
[multiple] vendors into their 
shops. 


How does the iSCSI standard play 
into Deil’s plans? Our plans are 
to introduce a product in our 
fourth quarter. 


What will that be? An array or a 
network device? I really can’t 
say yet. 


Do you think iSCSI will overtake 
Fibre Channel for storage net- 
working? Not right away, but 
over time, iSCSI is going to 
pose a big challenge to Fibre 
Channel. @ 50370 
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Mr. 500 Servers 
in 156 Countries 
Managed from 
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Department of 
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“We have 3,000 PCs based everywhere from 
Argentina to Vietnam, and now our team can 
update them all from headquarters.” 
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Viktor Portmann 
Project Manager, Department of Foreign Affairs, Switzerland 





Make a name for yourself with Windows Server System: Microsoft Windows Server System makes it hi 
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central location, saving over $600,000 in travel expenses alone in the past year. They've also been able to 
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EDS Postpones Q3 
Earnings Report. . . 


Electronic Data Systems Corp. 
delayed the release of its third- 
quarter financial results from last 
Monday to this Wednesday, say- 
ing that it was reviewing the value 
of the IT assets being used as part 
of its $8.8 billion intranet contract 
with the U.S. Navy. Auditor KPMG 
LLP is seeking a charge against 
EDS’s third-quarter earnings to 
cover a decline in the worth of the 
equipment that supports the 
Navy/Marine Corps Intranet. 


. .. And Offers Early 
Retirement Program 


EDS also said it’s offering early 
retirement incentives to about 
9,200 of its 53,000 U.S. work- 
ers. EDS expects about half of the 
eligible employees to accept the 
buyouts, although it noted that 
some of the vacated jobs would 
likely have to be filled again. The 
early retirement offer is part of a 
plan, disclosed in September, to 
cut another 15,000 to 20,000 
jobs in the next two years. 


EC Clears Oracle’s 
Bid for PeopleSoft 


The European Commission has 
given Oracle Corp. the green light 
to proceed with its hostile take- 
over bid for PeopleSoft Inc., re- 
moving the last regulatory road- 
block to a deal. The commission 
said it was unable to find “suffi- 
cient evidence of competitive 
harm” that would result from a 
merger. PeopleSoft said its board 
will review the decision’s implica- 
tions “in due course.” 


Short Takes 


RED HAT INC. warned its Linux 
users about an e-mail hoax urging 
recipients to download purported 
software patches that actually 
contain malicious code. . . . 
Japan’s Fair Trade Commission 
held an initial hearing with 
MICROSOFT CORP. over allega- 
tions that the company violated 
the country’s antitrust laws. 
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CIO Relishes 
‘Guinea Pig’ Role . . . 


. .. inside Microsoft because “I can realize value earlier,’ 


? 


So says Ron Markezich, CIO for IT at Microsoft. But 
Markezich might easily be misconstrued as a senior 
executive on the vendor’s quality assurance team. 
His staff is responsible for putting Microsoft tech- 


nologies targeted for enter- 
prise use into the company’s 
production IT environment 
at their alpha stage, long be- 
fore they’re ready to ship. “I 
look at our IT organization as 
an extension of our product 
development team,” Mar- 
kezich says. Given his re- 
liance on prerelease versions 
of products, you'd think his 
bosses would cut him some 
slack in delivering services to 
Microsoft’s end users. Not so, 
he claims. “I don’t feel like I 
get more slack,” Markezich 
says, noting that his service- 
level requirements actually 
increased this year. That logic 
stems from the belief that 
early product adoption gives 
him a head start on improv- 
ing system capacity, perfor- 
mance and reliability while 
keeping a lid on costs. Marke- 
zich cites his early deploy- 
ment of Exchange Server 
2003, which Microsoft began 
using well before the soft- 
ware’s commercial release. 
He says he was able to elimi- 
nate 67 Exchange Server 2000 
processing sites and consoli- 





date the company’s global 
e-mail system into seven sites 
running the newer software. 
That has helped Markezich 
cut $100 million from what he 
calls “sustainer spend,” the 
fixed IT costs for supporting 
employees — dropping the 
annual total to about $300 
million. His next big project 
doesn’t revolve around Mi- 
crosoft’s core software. He’s 
beginning to upgrade the 
company’s 802.lb Wi-Fi in- 
frastructure, most likely to 
802.llg technology. He calls 
the project “the world’s 
largest wireless WAN deploy- 
ment” and says it should be 
done by June. That doesn’t 
mean he’s refraining from 
putting Microsoft’s alpha 
products through their paces, 
though. In fact, Markezich ac- 
knowledges that sometimes 
Microsoft IT is the bottleneck 
on the company’s delivery of 
new products. “A lot of the 
times a Microsoft product 
slips its ship date is because 
we did not sign off on it,” he 
says. Now you know who to 
blame. 





CIW looks beyond 


alpha products. . . 

... and slips its R&D work into 
“the office of the future.” The 
Microsoft Center for Infor- 
mation Work on the compa- 
ny’s Redmond, Wash., cam- 
pus gives corporate users a 
glimpse of IT’s misty future 
through a series of hands-on 
demos. “We're out past Long- 
horn,” says Thomas Gruver, a 
group product manager who 
oversees CIW. The arrival of 
Longhorn, the next major re- 
lease of Windows, may seem 
to be taking forever, but for 
Gruver, it’s just around the 
corner. He’s looking at tech- 
nology that’s a little further in 
the distance, such as a 
blend of networking 
and groupware tech- 
nology that will let 
Tablet PC users share 
data immediately on a 
common conference 
room display. Gruver 
hopes to showcase 
that possibility to 
CIW visitors starting 
next year. A CIW 
highlight, the Ring- 
cam, may soon be- 
come a Microsoft- 
branded product. It contains 
a half-dozen mini-cameras in- 
stalled in a ring plus a direc- 
tional microphone that can 
locate a speaker at a confer- 
ence room table and project 
him on PCs or video displays 
during a multimedia confer- 
ence call. Expect to, um, see it 
in 2005. 


Forget Java, C# or 

C++ because... 

... the next hot development 
language is Flash. Although 
Kevin Lynch, chief software 
architect at San Francisco- 
based Macromedia Inc., 
doesn’t claim that you'll nev- 
er need to program in any- 
thing but Flash again, he does 
argue that if you’re creating 
Web-based applications that 
need graphical user interfaces 
— and which ones don’t? — 
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HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY GOSSIP BY MARK HALL 


Daily downloads 
deena \ (ig 


Flash is the ideal technology. 
Why? He says Flash “needs 
far less bandwidth” for down- 
loading graphical pages be- 
cause it updates only the 
parts of a page that contain 
new information as opposed 
to doing a full page refresh. 
The market size should also 
attract developers. Lynch es- 
timates that 500 million PCs 
are equipped with Flash Play- 
er. Flash developers currently 
use Macromedia’s J2EE-based 
Flex server software to com- 
pile Flash code. But a 
.Net version is in beta 
now and will likely go 
gold early next year. 


Faxes to use IP 


networks ina... 
. . New release of 
RightFax from Cap- 
taris Inc. in Bellevue, 
Wash. Version 9.0, 
available this week, 
includes an optional 
board from Brook- 
trout Inc. that slips 
into the Captaris fax server. 
The board handles the elec- 
trical differences between an 
Ethernet network and the 
public switched telephone 
network, while the Captaris 
software smoothes out the 
protocol conflicts so a fax 
that’s designed to be trans- 
mitted only over the phone 
network can use IP as its 
transport mechanism. Matt 
Shoening, chief operating of- 
ficer at Captaris, acknowl- 
edges that few fax-over-IP in- 
stallations exist now, but he 
insists that they'll be here 
someday because centralized 
IP-based network administra- 
tion cuts costs. RightFax 9.0 
also adopts Microsoft SQL 
Server as its data store, up- 
ping capacity from 1 billion 
faxes to a virtually unlimited 
number. @ 50369 





SAS, the leader in business intelligence software, asks... 


SERVICE LEVEL MA) No business wants to believe it’s wasting precious IT dollars. So if executives and co-workers grumble 
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BRIEFS 


Dell Installs SUSE 
Linux on Servers 


Dell Inc. said it plans to preinstall 
Novell inc.’s SUSE Linux operating 
system on several of its Power- 
Edge servers and fully support 


preinstalls Red Hat Linux on its 
servers, but it had offered SUSE 
Linux only as an add-on until now. 
SUSE Linux Enterprise Server 9 
will be available on the PowerEdge 
1850, 2800 and 2850 models, 
with annual subscription fees 
starting at $192 per CPU. 


Norte! Again Delays 
Release of Results 
Nortei Networks Corp. again de- 


layed its release of restated finan- | 
cial results for 2003 as well as its | 
| ally a stronghold for rival IBM, 
| and it is supported by several 


numbers for the first half of this 
year. The Brampton, Ontario- 
basec company was due to report 
the results by the end of October, 
but CEC Bill Owens said it was 
unabie to meet the deadline “giv- 
en the enormous details and com- 
plexity involved.” Nortel set mid- 
November as its new target. 


Nextel Extends IT 
Deal With Amdocs 


Wireless carrier Nextel Communi- 
cations Inc. has extended by two 
years an IT services contract 
under which Chesterfield, Mo.- 
based Amdocs Ltd. manages its 
billing and customer support sys- 
tems. Reston, Va.-based Nextel 
said the contract, originally a 
nine-year deal signed in 2000, 
will now run through 2011. Finan- 
cial details weren’t disclosed. 


Short Takes 


The U.S. appeals court in Cincin- 
nati vacated a preliminary injunc- 
tion blocking Sanford, N.C.-based 
STATIC CONTROL COMPONENTS 
INC. from distributing chips it 
uses to clone Lexmark Inc.’s 
printer cartridges. . . . CINGULAR 
WIRELESS LLC completed its ac- 
quisition of AT&T WIRELESS SER- 
VICES INC. after agreeing to di- 
vest itself of assets in 11 states. 
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BEA Aims to Boost 


Bundled solutions 


| target vertical 
| markets, IBM 


users of the software. Dell already | 


BY HEATHER HAVENSTEIN 


EA SYSTEMS INC., 
looking to broaden its 
middleware business, 
last week took the 


| wraps off a solutions frame- 


work that can help WebLogic 


| Platform users build service- 


oriented architectures (SOA) 


| for tackling common enter- 
| prise pain points like boosting 
| customer service. 


The move marks BEA’s en- 
try into the bundled technol- 
ogy solutions arena, tradition- 


major software suppliers. 
The framework is part of 


| BEA’s Liquid Computing ini- 
tiative, unveiled at its user con- | 


ference last spring. The bun- 


dled offering will use BEA’s 


| build SOAs for five common 


| mentum Inc. and Siebel Sys- 


' ing’s architecture reference 


| BEA plans to provide frame- 





WebLogic Platform, through 
its portlets and reusable ser- 
vice-oriented integration com- 
ponents called controls, to 


enterprise goals: customer 
service, employee service, ser- 
vice delivery platforms, trade 
processing and radio frequen- 
cy identification capability. 
The framework includes el- 
ements supplied by aslew of | 
partners, including SAP AG, 
Business Objects SA, Docu- 


tems Inc., that add to the offer- | 


blueprint, workflow examples, 
best practices and services. 


works for four vertical mar- 
kets: telecommunications, fi- 
nancial services, manufactur- 
ing and government. 
Oncology Therapeutics Net- 
work Corp. (OTN), a San Fran- 
cisco-based distributor of spe- 
cialty medical products, has 





WebLogic Business 


been talking to BEA about 
using the new frameworks to 
help it integrate pieces of its 


| CRM and ERP packages via an 


SOA, said Rajan Jena, an enter- 
prise architect at OTN. “We 
are particularly interested in a 
set of prebuilt components that 
are a one-time effort to create 
and can be reused,” he said. 


www.computerworld.com 


OTN already has used the 


| Web services framework in 


BEA’s WebLogic development 
platform to streamline the 
creation of a Web-based front 
end for its employee self-ser- 
vice portal. “It helps us do our 
round-trip development much 
faster than plain-vanilla J2EE,” 
Jena said. For existing applica- 
tions, OTN has used the 
framework to create a “fa- 
cade” of a Web services API 
call on top of legacy applica- 
tions. Then the applications 
are exposed inside the portal. 
Companies need guidance 


| on many aspects of building 


an SOA, such as arranging 
Web services in the right or- 
der, said Ronald Schmelzer, 

a senior analyst at ZapThink 
LLC in Waltham, Mass. But 
although the new program 

is a forced response to IBM’s 
success in the bundled solu- 
tions business, Schmelzer said 
BEA runs the risk of alienating 
its integration partners. 


@ 50409 


| MICROSOFT'S MOVES 


Microsoft continues its push into the 
enterprise-level development market: 


QuickLink 50329 
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BY JAIKUMAR VIJAYAN 
| Symantec Corp. last week out- 
lined an “information integri- 


ty” strategy that users and an- 
alysts said addresses a grow- 
ing need for a more holistic 
view of the operational and 
security risks that companies 
face. 

But they added that whether 
the new approach succeeds 
will depend on how well 
Symantec, which is primarily 
known for its antivirus tools 
and firewalls, can execute on 
its wider vision. 

As part of the initiative, 
Symantec will deliver prod- 
ucts and services designed to 
give companies a full assess- 
ment of the risks and vulnera- 
bilities they face and then en- 
able them to act upon that in- 
formation, said Enrique Salem, 





‘Symantec Tries to Move 
Beyond Security Tools 


the Cupertino, Calif.-based 
company’s senior vice presi- 
dent of security. 

For instance, a new version 
of Symantec’s Enterprise Se- 
curity Manager software that 
was released last week can 
help companies identify com- 
pliance problems related 
to regulations such as the 
Sarbanes-Oxley and Gramm- 
Leach-Bliley acts, Salem said. 

Similarly, other products 
will let companies capture 
snapshots of the operational 
state of their servers, PCs, ap- 
plications and operating sys- 
tems, as well as information 
about their configuration set- 
tings and patch levels. Some of 
those capabilities are available 





now, but more will be added in 
the future. 
“Tt’s a model and a set of 


policies that CIOs can use to 
manage their environment,” 


| Salem said. “It stresses the 


concept of understanding 
your environment, acting on 


| the information and control- 


ling it.” 

Symantec user Dave Jordan, 
chief information security of- 
ficer for the Arlington County 
government in Virginia, said 
he thinks the idea makes sense 
for security managers. “Of 
course, some of this is just 
marketing, but it’s not all mar- 
keting,” said Jordan. 


A Better View 


At one level, Symantec’s new 
initiative is aimed at moving 
the company into new markets 
now that its core security 
tools business is saturated, 
according to Jordan. But he 
added that the company’s 
strategy could meet the need 
for a management dashboard 
that gives an overall view of 
the operational and security 





landscapes inside companies. 

Symantec’s road map “pro- 
vides a framework to help 
guide us,” said Shaun Catlin, 
a senior systems analyst at 
Atlanta-based law firm Ford 
& Harrison LLP. “It’s some- 
thing that we knew needed 
to be done.” 

The alignment of informa- 
tion from the operational and 
security sides should give 
companies more control over 
possible risks, said Cory Fer- 
engul, an analyst at Meta 
Group Inc. “What Symantec is 
saying is, “You can’t secure 
what you can’t control, and 
you can’t control what you 
don’t understand.’ ” 

Other vendors, such as IBM 
and Computer Associates In- 
ternational Inc., are making 
similar pitches, according to 
Ferengul. But, he added, 
“there’s a lot of maturing that 
has to happen” before all of 
the required information can 
truly be integrated. @ 50416 
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Germans Assess Linux 
Deployment Costs 
FRANKFURT 
OUGH ECONOMIC times in Ger- 
Tos: have made Linux operating 
systems and other open-source 
products tantalizing to local business- 
es. Yet many remain hesitant to dump 
their Microsoft Corp. software com- 
pletely, if only because it performs rel- 
atively well and nearly everyone in 
corporate Germany uses it. 
That was the consensus of speakers 


at the LinuxWorld conference in Frank- | 
it can continue to provide network ser- 
| vices to and from Japan. 


furt last week. IDC analyst Wafa Mous- 
savi-Amin warned users that although 
Linux software is basically free to ac- 
quire, it can be costly to deploy. “Busi- 
nesses can see costs pile up quickly for 
support, maintenance and, in particu- 
lar, training if they lack 
in-house knowledge,” he 
said. “Each enterprise 
should carefully study 
whether the low fee to ac- 
quire the software will 
offset these other costs.” 
Among server operat- 


yee tg em 
mero Bem 


Spain's PC market leaders: 
OM ite ek ee 


Ce amet Cig 
IDC, LONDON, OCTOBER 2004 


An International 
IT News Digest 


ing systems in Europe, Linux grew 
from a 1% market share in 1999 to 9% 


| in this year’s third quarter, IDC said. 
| mJOHN BLAU, IDG NEWS SERVICE 


| Cable & Wireless 
| Continues Fire Sale 


LONDON 


| ONDON-BASED network operator 
Cable & Wireless PLC agreed last 


week to sell its Japanese business, 
Cable & Wireless IDC Inc., to Softbank 
Corp. for $133.3 million. But C&W will 
retain two international data nodes so 


The sale of the Japanese unit contin- 


| ues C&W’s retreat from an earlier plan 


to develop a $3.5 billion global IP net- 


| work. The company’s fortunes plum- 


meted in 2001, triggering 
a series of asset sales, 
thousands of layoffs, the 
dismantling of its global 
data services division 
and an exit from the U.S. 
and continental Europe 
except for continued 
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support of multinational customers. In 
January, C&W sold its U.S. Web host- 
ing and IP services units to Savvis 
Communications Corp. in Herndon, 
Va., for $155 million. 

mw LAURA ROHDE, IDG NEWS SERVICE 


_N.Z. Regulator Blocks 


Westpac Outsourcing 


AUCKLAND, NEW ZEALAND 


ESTPAC BANKING CoRP’s plan | 
to move its New Zealand main- | 
| frame processing to Australia | 


| has been scuttled by the Reserve Bank 


of New Zealand. A cutover to an IBM 


| Global Services facility in Sydney was 


scheduled for earlier this month, but 


| just a day before the move, the Reserve 
Bank pulled the plug. 


Westpac’s New Zealand division, 


| based in Auckland, agreed to hold off 


on the move until the Reserve Bank 


| finishes developing an outsourcing 


policy. The Reserve Bank said that it’s 


| concerned about outsourcing’s poten- 


tial effect on the bank’s ability to con- 
tinue operating in a crisis and that 


Westpac’s proposal wasn’t “sufficiently | 
| robust” to address that concern. 


m RANDAL JACKSON, COMPUTERWORLD 
NEW ZEALAND ONLINE 


| Compiled by Mitch Betts. 


www.computerworld.com 


Briefly Noted 


Advanced Micro Devices Inc. last 
week unveiled a $249 PC for the de- 
veloping world. The Personal Internet 
Communicator is a bare-bones PC 
with basic software, AMD’s Geode 
GX500 embedded processor, 128MB 
of RAM and a 10GB hard drive. 

@ TOM KRAZIT, IDG NEWS SERVICE 


The government of Ghana recently 
signed an agreement with Data Centa 
Ghana Ltd. and Lexis Nexis Butter- 
worths (Pty) Ltd. that will make the 
country’s laws accessible online. 
Durban, South Africa-based Lexis 
Nexis Butterworths has similar proj- 
ects under way in Uganda, Kenya, 
Tunisia and Nigeria. 

mw JOHN YARNEY, 

IDG NEWS SERVICE 


Sybase Inc.’s Financial Fusion Inc. 
subsidiary in Concord, Mass., has 
won a multimillion-dollar contract to 
set up an online banking system for 
Bank of China, one of China’s largest 
banks. 

mw SUMNER LEMON, 

IDG NEWS SERVICE 


Users Call for Improved 
Wireless Management 


BY MATT HAMBLEN 
SAN FRANCISCO 

At a conference held here last 
week by wireless industry 
trade group CTIA, IT man- 
agers, analysts and vendors all 
cited the need to find better 
ways to deploy and manage 
handheld devices as well as 
wireless services. 

Vendors such as Sprint 
Corp. and Intel Corp. an- 
nounced new managed ser- 
vices or upcoming technolo- 
gies designed to help IT man- 
agers incorporate wireless de- 
vices into corporate settings. 
But it was obvious from the 
comments of some people at 
the conference that wireless 


rollouts can still be frustrating. 


“The wireless industry is 
not taking a clear answer to 
the end user,” said attendee 
Leonard Loventhal, referring 


to both IT managers and busi- 
ness users. Loventhal is an ex- 
ecutive vice president at Hon- 
olulu-based Hawaii Home- 
Loans Inc., which launched 
wireless data services for its 
100 loan officers nearly three 
years ago. The process was 
very confusing, especially 
when it came to picking hand- 
held devices, middle- 
ware and wireless ser- 
vice plans, he said. 

Loventhal said that 
thanks to help from 
Sprint engineers, 
Hawaii HomeLoans 
has seen a solid return 


Treo 600 handheld de- 
vices from PalmOne 
Inc. and wireless cards 





for the laptop PCs 
used by its loan offi- 
| cers. Both technolo- 


MATT HAMBLEN 
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gies help the workers do text 
and voice messaging when 
they’re out in the field and in 
the office at costs lower than 
the prices companies typically 
pay for communications, ac- 
cording to Loventhal. 

But Loventhal said that 
many of the larger mortgage 
firms he’s familiar with 
haven’t taken the same path 
because of the complexity of 
wireless deployments. “If it 
was easy to set this up, more 
companies would be doing it, 


| he noted. 


Sprint said it’s be- 
ginning 90-day pilot 
rollouts of its Man- 
aged Mobility Ser- 
vices offering at 12 
companies. The ser- 
vice is due to be 
launched early next 

A year at a cost that will 
be “incremental” on 
top of Sprint’s month- 
ly wireless service 
fees of $40 to $80 per 
end user, said Rob 
Kermode, general 





manager of the new service. 
Kermode added that the 
work Sprint did with Hawaii 
HomeLoans is similar to the 
help it will provide to Man- 
aged Mobility Services cus- 
tomers. The offering supports 
devices running Windows or 
PalmOS and includes security 
management services such as 
data encryption and the abili- 
ty to remotely disable devices. 
Analysts said Sprint’s move 
will likely be quickly matched 
by other wireless carriers. 
“Wireless rollouts are still 
complex, despite all the years 
of working on the problem,” 
said Bob Egan, president of 
Mobile Competency Inc. in 
North Providence, R.I. “The 
complexity requires the oper- 
ators to do some of the heavy 
lifting, so Sprint’s announce- 
ment is a good first step.” 
Nikhil Deshpande, a busi- 
ness development director at 
Intel, said the chip maker is 
working on technology de- 
signed to let systems adminis- 
trators use existing manage- 








ment tools to bring wireless 
devices under the IT umbrel- 
la. Intel began a proof-of-con- 
cept deployment with the 
University of Arkansas at Pine 
Bluff in April, but Deshpande 
said the technology likely is 
three to five years away from 
commercial release. @ 50422 


Tom Krazit of the IDG News 
Service contributed to this story. 


MORE NEWS ONLINE 


CA releases a tool for managing wireless 

LANs and identifying rogue users: 
QuickLink 50397 
www.computerworld.com 
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Continued from page 1 


ID Management 


sign collaboration we are go- 
ing to need won't tolerate a 
world where you have silos of 
identity [data],” Scott said in 
an interview prior to deliver- 
ing his keynote speech. 

GM's plan is a prime exam- 
ple of the increased focus 
some companies are putting 
on identity and access man- 
agement as a way of cutting 
administrative costs and im- 
proving end-user access to ap- 
plications, said Pete Lind- 
strom, an analyst at Spire Se- 
curity LLC in Malvern, Pa. 

The Boeing Co. is another 
large user that’s in the midst 
of a long-term effort to give 
employees, customers and 
suppliers single-sign-on ac- 
cess to a range of applications 
and computing services. 

Already, Boeing employees 
can use their corporate log-ons 
to access information on pass- 
word-protected Web sites op- 
erated by benefits providers, 
said Michael Beach, an associ- 
ate technical fellow at the 
Chicago-based company. 

In addition, mechanics at a 
major airline customer of Boe- 
ing can use their regular user- 
names and passwords to ac- 





cess electronic repair manuals 
stored on Boeing’s internal 


| networks. The aircraft maker 
| is working to extend the capa- 


bility to other airlines, he said. 
The drastically reduced 


| number of end-user accounts 
| that need to be maintained 


and supported in such a feder- 
ated identity management in- 


| frastructure has resulted in 


“substantial cost savings” and 
improved user productivity, 


| according to Beach. 


The federated system is 


| built around single-sign-on 
| software from Cupertino, 
| Calif.-based Oblix Inc., al- 


though Beach said that Boe- 
ing had to do “quite a bit of 


| customization.” 


Regulatory Pressures 

Also playing a key role in dri- 
ving consolidated identity 
management projects are new 


| regulations, such as the Sar- 
| banes-Oxley Act, that require 


companies to get a better han- 
dle on their application ac- 
cess-control capabilities, Lind- 
strom said. 

“Regulatory pressures are 


| driving a lot of what’s happen- 


ing in the security space,” said 
Lindstrom. Implementing con- 
sistent identity and access 
management tools can give 
large companies such as GM 


| that access 
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Expedia Unit Offers Single Sign-on for Travel Bookings 


DENVER 


Business travelers who use Ex- 
pedia Corporate Travel’s Web 
site can now access its online 
services from within their own 
intranets via a single-sign-on ap- 
proach, using their regular user- 
names and passwords. 

The Bellevue, Wash.-based 
unit of Expedia Inc. said at the 
Digital Identity World conference 
here that it has installed identity 
management technology that 
eliminates the need for cus- 
tomers to separately log on and 
authenticate themselves to its 
password-protected Web site. 


and Boeing “a way of getting a 
top-down look at what legiti- 


| mate users are doing with ap- 


plications and of monitoring 
” he added. 

GM's existing identity 
management infrastructure 
is “not an enterprise solution,” 
Scott said, adding that func- 
tional units such as manufac- 
turing and engineering control 
their own user identity infor- 
mation. 

The global identity manage- 
ment architecture and gover- 


| nance model will use a combi- 


Toledo Schools May Resurrect 
Stalled PeopleSoft Implementation 


BY MARC L. SONGINI 
As it looks to upgrade its big- 
iron ERP system, the public 

school system in Toledo, Ohio, 
is also eyeing the resurrection 
of a $4.3 million PeopleSoft 

Inc. accounting and human re- 


sources software installation it | 


abandoned five years ago 
Toledo Public Schools 
needs to do something with 
the quarter-century-oid ERP 
mainframe system, which 
still relies on a clumsy green- 
screen interface, said chiet 
business manager Danie 
Burns. He would like to see it 
replaced outright, or at least 
Web-enabled with a menu- 
based interface to help auto- 


mate tasks such as processing 
purchase orders. 

“You want to do it right and 
identify your risks and make 
sure you identify your costs,” 
Burns said. That includes “not 
just the software purchase, but 
the training,” he said. 

One of the main drivers be- 
hind an outright replacement 
of the system is the fact that 
the application is written par- 
tially in Cobol, and it’s diffi- 
cult to find staff to support it. 

Burns intends to devise two 
potential solutions. One might 
invoive throwing an easy-to- 
use Web-based front end on 
the mainframe, hiding the 
back end’s complexity from 


| users. Another option would 


be to add a graphical user in- 
terface and swap in a third- 


| party ERP application running 


on Windows NT and an Ora- 
cle database. That would keep 


| any future move to a new sys- 
| tem transparent to the users. 


You want to 
do it right and 


| identify your risks 
_ and make sure you 


identify your costs. 


Cee e ee eeerersseseeseeeeeeeeees 


DANIEL BURNS, CHIEF BUSINESS 
MANAGER, TOLEDO PUBLIC SCHOOLS 





Indiana University, which uses 
Expedia's site to book travel for 
its employees, is testing the sin- 
gle-sign-on feature. “The bottom 
line is that you don’t need to 
keep logging into systems to get 
something done,” said John 
Harner, director of travel ser- 
vices at the Bloomington-based 
university. 

Expedia has installed Oblix’s 
SharelD federated identity man- 
agement software and has part- 
nered with the software vendor 
to help users install the required 
single-sign-on starter kits on 
their systems. Simon Tam, vice 


nation of directory manage- 
ment technologies, such as 
the Lightweight Directory 
Access Protocol and Micro- 
soft Corp.’s Active Directory, 
Scott said. 

The company also plans to 
use identity federation tech- 
nologies based on the Securi- 
ty Assertion Markup Lan- 
guage and Liberty Alliance 


| Project standards to provide 


cross-domain application ac- 
cess to GM employees and ex- 
ternal users. “A system that is 
not federated wit! be impossi- 


In the long run, Burns said 
he would like to implement a 
joint human resources and fi- 


| nancials ERP backbone that 


could transmit student enroll- 
ment information seamlessly 

between those two systems. In 
addition, he said he would like 
any new system to support re- 
porting and remote access and 


| be able to extract human re- 


sources information, such as a 
teacher’s profile, and put it on 
the Web for public review. 
Since the Toledo school 
district has spent millions of 
dollars on the PeopleSoft soft- 
ware, there could be an advan- 
tage to resurrecting that plan. 
In 1998, the district paid 
$2.6 million for the vendor’s 


| accounting and human re- 


sources software and another 
$1.7 million to an integrator 
for the actual rollout. How- 
ever, budget cutbacks in 1999 








president of product develop- 
ment at Expedia Corporate Trav- 
el, said that existing users can 
get the Oblix technology at a dis- 
counted price. 

“What it does is remove an 
impediment for business travel- 
ers,” said Henry Harteveldt, an 
analyst at Forrester Research 
Inc. “It makes the booking proc- 
ess easier and saves the traveler 
time.” Such improvements are 
needed because a substantial 
number of corporate users with 
access to Web-based travel ser- 
vices don’t use them, he noted. 

- Jaikumar Vijayan 


ble for us to manage,” Scott 
said. “It would kill us adminis- 
tratively.” 

GM plans to hire a prime 
contractor to install and man- 
age the global identity man- 
agement services once its ex- 
isting IT services contract 
with Electronic Data Systems 
Corp. ends in June 2006, ac- 
cording to Scott. He wouldn’t 
disclose a specific deployment 
schedule or a cost estimate for 
the project but said he expects 
the tab to be “in the millions” 
of dollars. @ 50417 


killed the project. The district 


| still owns the software, and 


the only way to recover its in- 
vestment is to try to install it 
again. But doing that isn’t nec- 


| essarily a given, Burns said. 


“I’m not going to rule out 
other applications,” he said. 

Whatever the Toledo school 
system does, the plan present- 
ed to the superintendent of 
schools will have to show cost 
savings that justify any new 
expenses. Burns said he would 
also consider staggering the 
implementation, installing one 
application at a time. 

It’s not uncommon for past 
multimillion-dollar invest- 
ments to lie fallow, said Joshua 


| Greenbaum, an analyst at En- 


terprise Applications Consult- 
ing in Berkeley, Calif. “With 
local and municipal govern- 
ments, there seems to be a bad 


legacy of doing this.” @ 50400 
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Microsoft Recants Pledge for Exchange Add-on 


the vendor received more than 175,000 

requests to evaluate the product. 
Still, Microsoft faces a challenge 

in getting customers to upgrade Ex- 


Exec retreats from 
promise of 2005 ship 





BY JORIS EVERS 

Microsoft Corp.’s plans for its Exchange 
Server line have become even more 
uncertain than they were earlier this 
year when the company removed the 
2006 “Kodiak” release of the messag- 
ing software from its product road map. 

Microsoft officials are backpedaling 
on a May promise to ship an addition 
to Exchange called Edge Services in 
2005. The company described the add- 
on as an intelligent message-transfer 
agent that offers security, spam and 
virus protection. It was the only an- 
nounced release for the Exchange line 
beyond 2004. 

“We remain very committed to Edge 
Services,” said Kim Akers, a senior di- 
rector in Microsoft’s Exchange Server 
group. But, she added, “it is premature 
to talk about timing.” 

Analysts said that with no product 
road map, it’s difficult for customers to 
make licensing decisions and plan up- 
grades. “Microsoft owes it to its cus- 
tomers to specify and deliver more or 
less on time the products and updates 
they say are coming,” said Peter Paw- 
lak, an analyst at Directions on Micro- 
soft Inc. in Kirkland, Wash. The onus is 
on Microsoft to provide a true road 
map because its multiyear licensing 





contracts include a maintenance pro- 
gram that covers software updates, 
Pawlak said. 

Although Microsoft makes it diffi- 
cult to anticipate which products are 
in the pipeline, it’s delivering incre- 
mental updates to Exchange, said 


| Teney Takahashi, an analyst at The 


Radicati Group Inc. in Palo Alto, Calif. 
“Microsoft is taking its time to develop 


| these products right,” he said. “I think 


that is more important than offering a 
road map.” 


User Timetables 
Philip Colmer, IT manager at ProQuest | 
Information and Learning Ltd. in Cam- | 
bridge, England, said he’s content with 


| the Exchange Server 2003 system he 


upgraded to at the beginning of the 
year. “I am not too bothered at this 
point that Microsoft has not made any 


| ” : 
announcements,” he said. 


Microsoft is heralding Exchange 
Server 2003 this week at a user event 
in Orlando. However, the company 
isn’t ready to publicly discuss a road 
map there, Akers said. 

In a keynote at the Exchange Con- 
nections event, Dave Thompson, cor- 
porate vice president of Microsoft’s 
Exchange Server products group, said 
the company has sold 55% more Ex- 
change Server 2003 licenses in its first 
year than for the predecessor version 
in the same time frame. In addition, 





Microsoft Revises Antispam Plan 


BY PAUL ROBERTS 

After running into loud opposition to 

its first Sender ID antispam plan, Mi- 

crosoft Corp. revised it and resubmit- 
ted it to the Internet Engineering Task 
Force (IETF) last week. 

The new plan resolves disputes with 
Internet service providers and the 
open-source software community 
about the use of patent-pending tech- 
nology, said Meng Weng Wong, chief 
technology officer at Pobox.com and a 
co-author of the revised proposal. 

The standard combines two authen- 
tication standards — Caller ID, which 
Microsoft developed, and Sender Poli- 
cy Framework (SPF), which Meng de- 
veloped. Microsoft submitted a draft of 
Sender ID to an IETF working group in 
June, but the approval process became 
bogged down because Microsoft said 
it held patents for algorithms used to 
check PRAs, or purported responsible 
addresses, and planned to require that 





users obtain licenses for Sender ID 
[QuickLink 49427]. 

The dispute produced some high- 
profile defections from the specifica- 
tion, including The Apache Software 
Foundation. America Online Inc. also 
opposed Sender ID because it wasn’t 
compatible with early forms of SPF. 
AOL said it will support the revised 
version of Sender ID. 

Microsoft expects the specification to 
be given “experimental” status by the 
IETF but doesn’t know if it will be tak- 
en up for formal approval by the group, 
according a Microsoft spokesman. 

Despite the changes, the new speci- 
fication still might not satisfy open- 
source software advocates, who con- 
tinue to be concerned about Micro- 
soft’s patent claims and the larger 
problem of proliferating intellectual 
property patents, Meng said. @ 50350 





Roberts reports for the IDG News Service. 


change environments. The Radicati 
Group expects that Exchange Server 
2003 seats won’t exceed the number of 


| Exchange 5.5 or Exchange 2000 seats 


until the end of 2005. @ 50327 


Evers reports for the IDG News Service. 
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Hosted SAP Service Targets Midmarke 


BY MARC L. SONGINI 

SAP AG is rolling out a hosted 
service it hopes will appeal to 
midsize customers that can 
buy the software at a monthly 
fee as low as $325 per user per 
month while avoiding much 
of the complexity of in-house 
installations. 

SAP last week unveiled 
the managed offering, which 
officials said delivers pre- 
packaged bundles of software 
aimed at specific vertical mar- 
kets, such as consumer goods 
and high-tech device manufac- 
turers. The bundles use server 
and storage hardware in the 
data centers of SAP partner 
Hewlett-P; rd Co. HP will 
also provide security and 
other technical support and 
services. 

Previously, SAP primarily 
offered hosted applications 
only to very large companies 
with special requirements 
consistent with their scale, 
said Bill McDermott, CEO and 
president of SAP America Inc. 


Dedicated Servers 

Under the new plan, each cus- 
tomer gets a icated serv 
in an HP data center. “A lot of 
customers in small to medi- 
um-sized businesses told me 
they don’t like the one-to- 
many [hosting] model where 
their data is managed in an 
open environment,” McDer- 
mott said. “They want a one- 
to-one relationship.” 

Gary Walden, SAP proj 
manager at refiner C&H Sugar 
Co., said that if a single month- 
ly pricing scheme had been 
available a year ago when his 
company was negotiating with 
SAP for a hosted service, “we 
would have looked at it very 
hard” as a way to save money. 
C&H, in Crockett, Calif., has 
used a full suite of hosted SAP 
applications since March. 

The C&H hosted systems 
contract listed separate prices 
for implementation and con- 
sulting fees, among other 
things, Walden said. Neverthe- 
less, the hosting service has 
helped boost C&H’s opera- 
tional efficiency without 
requiring extra IT support 


| staff around the clock. | no interest at all, said IT vice 
| Fora large company like | president Mike Perroni. The 

| Halliburton Corp. in Houston, | energy and construction ser- 
| the new SAP offering sparks | vices provider currently runs 
| 
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| SAP R/3 hosted by an HP data | providers by targeting pack- 
| center and technical staff.“We | ages to specific industries 


only have one instance of SAP, | T naged offering will 
and it’s big,” Perroni said. ikely appeal to large SAP 
Amy Konary, an analyst at ending the software 


| IDC, said SAP separates itself to subsidiaries or regional of- 


from other hosted application fices, she said. @ 50364 
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OPINION 


DON TENNANT 


In Praise of Perseverance 


OR AS LONG AS I can remember, when- 
ever anyone has asked me what trait I ad- 
mire most in a person, I’ve been able to 
respond without having to ponder the 
question. It’s perseverance. The faith, 
courage, strength and will it takes to refuse to give 
up even when the obstacles seem overwhelming 
define an attribute that, more than any other, en- 
ables people to leave this world a better place. 


Last week, my dad lost 
his battle with ALS — the 
disease I’ve mentioned 
here before that’s also 
known as Lou Gehrig’s 
disease — after a three- 
year fight that epitomized 
what it means to perse- 
vere. Through all the un- 
speakable physical suffer- 
ing, he remained emo- 
tionally strong and char- 
acteristically selfless, and 
he did it all without ever 
losing his sense of humor. Enough 
people were inspired by the example 
he set throughout his life, and espe- 
cially during the past three years, 
for there to be no question that he 
has indeed left this world a much 
better place. 

He used to really enjoy reading my 
columns, and I know he wouldn’t 
want me to use this space to thank 
him for the gift of his inspiring per- 
severance. He’d want me to thank 
you for yours instead. 

It is indeed through sheer perse- 
verance that the community of IT 
professionals has created and ad- 
vanced the systems that have 
changed and improved our lives so 
dramatically in recent years. So 
thanks for that. 

Thank you for not giving up back 
when it seemed like the Web was a 
pipe dream because the pipes couldn’t 
deliver the bandwidth cheaply 
enough for the average guy. My dad 
loved what the Web enabled him 
to do, and he took full advantage of 
it until he could no longer lift his 
arms to his keyboard and his fingers 





could no longer press 
the keys. 

Thank you for not 
giving up when the 
naysayers scoffed at the 
notion of making airline 
reservation systems ac- 
cessible to anyone with 
a computer. After at- 
tending the Storage Net- 
working World event in 
Orlando last week, I was 
on my way to a Kronos 
user conference that 


was also being held there when I got | 


the call that my dad was nearing the 
end in a San Antonio hospital. I 


| turned my rental car around, head- 
| ed straight to the airport and made 


a call to Linda Gorgone, Computer- 


Upon my arrival at the airport, 

| I checked in with an electronic tick- 
et. That technology enabled me to 
get to San Antonio in time to thank 
my dad for everything he has done 
for me, tell him I love him and say 

| goodbye. 

There are no doubt countless 
stories of perseverance on the part 
of the IT professionals who made 
all this technology happen, and 
| most will never be told. That per- 
severance will therefore never be 
| fully or properly appreciated. I 
want it known that I appreciate it 

deeply. 
Finally, a note of thanks to every- 
one who wrote with such kind words 
| in response to my previous refer- 
| ences to ALS. This note from an IT 
| manager in Arizona whose wife has 
| ALS was especially touching: “I have 





| never met anyone with ALS that was | 


| nota sincerely good person,” he 
| wrote. “I'll bet your dad was a won- 
| derful man.” 

Yeah, he was. And he was clearly 
in very good company before he 
| died. What’s heartening is that he’s 
| in even better company now. 


| @ 50375 


world’s miracle-working office man- | 


ager, who booked a flight for me. 
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DAN GILLMOR 


Flawed Vote 
Could Give IT 
A Black Eye 


T’S LESS THAN two weeks 
before the 2004 elections 
as I write this, and I’m go- 
ing to go out on a not-very- 
long limb with a prediction. Who’s go- 
ing to win the presidency is anyone’s 
guess, but it’s a no-brainer to say ahead 
of time that we’ll look back on this as 
another messy election, in a technolog- 
ical sense. 
Many of the electronic voting ma- 
chines in use this year are flawed. 
Some are simply untrustworthy. It’s the 
result of a screw-up that shouldn't 
have happened in the first place and 
must not be allowed to occur again. 
Why is this relevant to the IT com- 
munity? Because the 
crummy voting tech- 
nology is ultimately 
an indictment of IT, 
not just of the vot- 
ing machine compa- 
nies and sloppy (or 
worse) bureaucrats. 
The 2000 presi- 
dential election was ‘ a 
almost a tie. The nar- BAN GILLMOR Is a colum- 
row margin brought nist at the San Jose 


to light a host of author of oe ma 
problems with , 


Grassroots Journalism 
punch-card voting 


machines, which de- 
served the garbage 
bins into which 
many were tossed. 

Congress understood that there was 
a crisis — of technology, of voter confi- 
dence and, ultimately, of our very sys- 
tem of selecting governments. But law- 
makers launched more money than 
brainpower at the problem. The result 
was the Help America Vote Act, which 
encouraged state and local voting offi- 
cials to spend wildly, and too quickly, 
with not nearly enough due diligence. 

Among the worst flaws was an as- 
tonishing omission. There was no re- 
quirement that touch-screen voting 
machines come with a verification 
method like that of automated teller 
machines: a paper printout. 

The voting machine companies, and 
their too-credulous customers in gov- 
ernment, pooh-poohed the matter. One 
Florida official said the voting totals 
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were verifiable because, well, you 
could just ask the machine to repeat 
what it had told you. Good grief. 

Voting activists might have been less 
worried had they and many concerned 
computer scientists not uncovered a 
host of problems with the software in 
several of the most widely sold ma- 
chines — including security flaws that 
tech professionals found almost literal- 
ly beyond belief. But despite the ongo- 
ing whacks to their credibility, the ma- 
chine manufacturers have continued to 
insist that all is well. 

What has made the situation worse 
yet is their black-box approach. They 
insist that the source code is propri- 
etary, and unless forced by law, they 
won't even show it to government offi- 
cials. One e-voting system vendor, 
Diebold, went so far as to launch legal 
threats against some students who post- 
ed internal memos on the Web that the 
company found embarrassing; thankful- 
ly, a federal judge ruled against Diebold. 

Only one state, Nevada, required a 
voter-verifiable paper trail this year. 
California will require one in 2006, and 
some other states are also moving to- 
ward such measures. 

But a better answer is to bite the 
bullet, write off the billion-dollar-plus 
investment to date — and start over. 
We need open-source voting software 
and much better controls over the 
companies selling the machines. 

I'd like to see IT people become more 
active in the voting system. They could 
be poll watchers in the near term, but 
in the long run, they should take the 
lead in fixing a badly flawed system. 

There’s not much at stake here — 
just democracy. @ 50248 


MICHAEL H. HUGOS 
‘Hi, ’'m From 
Il; and?m 
Here to Help’ 


Y COMPANY has a 

hard time maintain- 

ing its profit margins. 
Customers can buy what we 
sell (stuff like paper cups, plastic 
spoons, paper towels, mops and floor 
wax) from lots of other companies. 
The prices we can charge are always 
being driven down. 

So how do we avoid having our prof- 

its squeezed to nothing? IT helps. We 


start when one of us walks 
into a business meeting and 
says, “Hi, I’m from IT, and 
I’m here to help.” The busi- 
ness people in my company 
are glad to hear this because 
my IT staffers are becoming 
masters of the 80% solution: 
We identify the repetitious 
things the business people 
do. As the company grows, 
such routine work (typically 
70% to 90% of what they do) 
is overwhelming these 
users. The IT group is learn- 
ing to design and quickly 
roll out simple systems that 
automate this routine work. 
These systems are cheap 
and quick to build because 
we never try to automate 
anything that isn’t routine. 

I see this as a major paradigm shift. 
For the past 30 years or more, people 
in IT have dreaded questions like, 
“Yes, but what about this?” or, “Can 
your system handle that?” Those com- 
ments always focus on exceptions to 
the general rules that a system is built 
to handle. Often, they have the power 
to stop new systems dead. They cause 
IT people to add complexity and ex- 
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pense to otherwise simple 
systems in order to handle 
exceptions that happen 
only once in a while. 

In the past, such com- 
ments were often voiced by 
people who didn’t want 


were motivated to come up 
with ways to delay or stop 
a rollout of new systems. 
Times have changed. Older 
people have gotten used to 
computers, and younger 
people can’t imagine living 
without them. And every- 
one’s workload has doubled 
or tripled. 

There’s no longer a need 
to build complex systems 
to appease obstructionists, 
because there aren’t many 

of them left. And since workflows 
change quickly and the most complex 
workflows change the fastest, why 
spend a lot of time automating them? 
Instead, learn to see complexity as 
combinations of simple, repetitive 
tasks and automate the simplest and 
most repetitive of them. 

Figuratively speaking, people in my 
company are often too busy mopping 





| to fix the leak. So we in IT build cheap, 


simple systems to do the mopping and 
free people up to figure out why the 
leak is happening and how best to fix 


| it. Once freed from the burden of rou- 
| tine tasks, they have time to do root- 
cause analysis and fix problems at the 
computers anyway and who | 
| responsive to unique customer needs. 


source. They also have time to be more 


If we serve those customers well, 


| they’ll do business with us again. 


The company wins in two ways. 


First, there are increased operating 
| efficiencies and cost savings that come 
| from eliminating recurring problems. 


Then there are the benefits of attract- 
ing and retaining customers with 


| unique needs — and such customers 

| are often the most profitable ones. 

| These wins happen because simple, 

| stable and scalable systems hum away 

| in the background, handling more and 

| more of the routine transactions. That 

| frees up people to focus on the nonrou- 


tine and to find the profit opportunities 
that are hidden there. This is how IT 
helps my company thrive. @ 49717 


WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site: 
www.computerworld.com/columns 








Programmers Can Learn From Mechanics 


AGREE WITH DON TENNANT’S 

final comment in his “Handi- 
capped Thinking” column [Quick- 
Link 49904] about the e-mail from 
a Linux supporter regarding auto 
mechanics. It does auto mechanics 
a great disservice to assume that a 
failed programmer could be a suc- 
cessful mechanic. A programmer 
can take a trial-and-error approach 
to solving a programming problem, 
but doing the same to solve a prob- 
lem in an auto is far more costly. 
The mechanic who misdiagnoses 
aclunking sound and replaces a 
transmission when a bad universal 
joint was making the noise will soon 
be looking for a new job. He might 
make it as a programmer if the 
u-joint was the second thing on 
his list of possible problems. 
Morris Campbell 
Systems manager, Norfolk 
Department of Human 
Services, Norfolk, Va., 
Morris.campbell@norfoik.gov 


T'S A SHAME society underval- 
ues, and often disrespects, the 


| excellent tradesmen, craftsmen and 
others who may have been trained 
on the job. | had a two uncles who 
worked from grade school to an old 
age. One had a third-grade educa- 
tion, and at one time he may have 
been the best mechanic in St. Louis. 
The other completed some college. 
He was an excellent small contrac- 
tor and factory mechanic, and his 
business skills made a lot of money 
for his employer. What a shame our 
society doesn’t value skill and sub- 
stance over the paper freely passed 
out at our schools. 

Jerry W. Hubbard 
Communication service 
supervisor, St. Louis 


ON TENNANT seems to misun- 

derstand the comment, “Heck, 
if | had cranked out this kinda crap 
when | was a junior programmer, I'd 
be an auto mechanic now.” It seems 
obvious to me that this simply 
means that people who don't write 
quality software could perhaps find 
another field in which they could 
produce a higher-quality product. | 








don't find it disparaging to auto me- 
chanics at all. It's just an assertion 
that many Microsoft engineers 
would be better served to find an- 
other line of work. 

| personally don’t blame the engi- 
neers for low-quality Microsoft soft- 
ware, however. | blame the culture 
and processes of the company as a 
whole, just as Bill Gates did in his 
e-mail missive on trustworthy com- 
puting a few years ago. 
Greg Bledsoe 
Senior network analyst, 
Columbus, Ga. 


Job Hunt Peeves 


INCE GETTING DOWNSIZED 

from a Big Five consulting firm 
two years ago, | have been on nu- 
merous interviews and have a few 
pet peeves of my own [“Hiring Hor- 
rors,” QuickLink 49558}. The big- 
gest is being asked to walk the hir- 
ing manager through my résumé. 
This translates as, “I didn't have 
time to read your résumé, so | have 
No idea who you are or what you've 
done.” I've spent hours researching 
the prospective employer. | am fully 





prepared to talk about what | can do, 
but | never get a chance to do so. 
Other peeves are interviews with 
everybody | could possibly come in 
contact with, even after the manager 
realizes the job isn’t a good fit, and 
insulting salary offers. When | was a 


| hiring manager, the goal was to get 


the best person for the job at fair 
market value. Hiring an employee 
was perceived as making an invest- 
ment, not bargain-basement shop- 
ping. It's an old maxim but true - 
you get what you pay for. 

Fiona M. Lamb 


Denver 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to 
Jamie Eckle, letters editor, Com- 
puterworld, PO Box 9171, 1 Speen 
Street, Framingham, Mass. 01701. 
Fax: (508) 879-4843. E-mail: 
letters@computerworld.com. 
Include an address and phone 
number for immediate verification. 


For more letters on these and 
other topics, go to 
www.computerworld.com/letters 
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QUICKSTUDY 

Error Checking and Correction 

Error checking and correction is the process of de- 
tecting errors during the transmission or storage 
of digital data and correcting them automatically. 
This usually involves sending or storing extra bits 
of data according to specified algorithms. Page 30 


SECURITY MANAGER'S JOURNAL 

Lack of Control 

Becomes Nightmare 

Not having complete control of network 
security operations is a nightmare for C.J. 
Kelly, and now she has to find out what’s 
really going on in the network. Page 32 
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OPINION 

Make Vendors Pay 

For Security Flaws 

Bruce Schneier says that the ultimate 
answer to security vulnerabilities is to 
make software vendors liable for the 
holes in their products. Page 34 


AKE A STROLL through almost any data 
center today, and you will see pretty much 
what you would have seen a decade ago — 
square white tiles over a raised floor, 
bright florescent lights, little red fire 
alarms everywhere and rows of faintly 
humming computer equipment and air 
conditioning gear. 

But this familiar scene masks some big changes in 
the way that data centers are built, as well as changes 
in computer technology and an evolution in what 
data centers are expected to accomplish. Ultradense 
server racks, the move to distributed and virtual proc- 
essing, a requirement for instant fail-over, and new 
requirements for IP telephony and voice over IP are 
all driving changes above and below the raised floor. 


Keeping Cool 

Perhaps the greatest challenge in data centers today 
is how to keep those rooms — and the components 
within them — cool. Facility designers used to apply 
a simple rule of thumb: If the room was going to be x 
thousand square feet, it would need y tons of air con- 
ditioning. Or designers relied on equipment “name- 
plates” that listed peak power usage based not on 
cooling requirements but on 

safety requirements. 

Those simple approaches 
don’t work well today. They’re 
likely to result in expensive 
overcooling of the overall facil- 
ity, even as temperatures in 
small areas — such as inside a 
rack of blade servers — soar. 

Ron Hughes, president of 
California Data Center Design 
Group, says the typical data 
center last year consumed 40 
watts of power per square foot 
and used server racks that con- 
sumed 2 kilowatts each. This : 
year, he’s designing a facility a 
that will average 120 watts per square foot and 
support racks that use 4 to 5 kilowatts. 

“And if you look at the latest projections from HP 
Sun, IBM, Dell and so on, they are predicting ‘hat 
racks will be 15 to 25 kilowatts for blade servers 
Hughes says. “The overall direction is toward smali 
er footprints, increased capacity, increased power 
and cooling requirements. I’ve seen projections fo 
blade servers as high as 30 kilowatts per rack, ane 
that’s well over 500 watts per square foot.” 

The issue at those levels isn’t cooling per se. dui 

Continued on page 26 
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Continued from page 23 

affordable cooling. Hughes says that at 
40 watts per square foot, it costs $400 
per square foot to build a data center, 
or $20 million for a 50,000-square-foot 
facility. But at 500 watts per square 
foot — which Hughes says we could 
see by 2009, well within the lifetime of 
any data center built today — the 
amount of air conditioning, uninter- 
ruptible power supply (UPS) units, 
power generators and related gear 
jumps dramatically. Construction costs 
soar to $5,000 per square foot, and the 
same data center busts the budget 

at $250 million, he says. 

The cooling challenge is compound- 
ed when a data center switches to 
emergency backup power. UPS units 
kick in instantly in a power failure, so 
there is no interruption in the flow of 
electricity to computers. But there is 
often a delay of 15 to 60 seconds for 
generators to restart the cooling units. 
That hasn’t been a problem in the past, 
but for some newer equipment, tem- 
peratures can rise fast. 

The temperature in a data center 
that averages 40 watts per square foot 
will rise 25 degrees in 10 minutes with 
cooling shut off, says Bob Sullivan, a 
senior consultant at The Uptime Insti- 
tute Inc. in Santa Fe, N.M. But in places 
where power consumption is 300 watts 
per square foot, the temperature can 
rise that much in less than a minute. 

The solution, Sullivan says, will be 
uninterruptible cooling that works the 
same way as uninterruptible power. 
That would involve putting air fans, 
and possibly systems that pump 
chilled water, on a UPS, he says. 


Distributing the Data Center 


Many companies today have just one 
big data center, or maybe two or more 
depending on the locations of users. 
But an abundance of cheap “dark” 
fiber, plus new virtualization software, 
is enabling a much more flexible, dy- 
namic and user-transparent distribu- 
tion of processing workloads. 

For example, the Federal National 
Mortgage Association has two data 
centers, including one designed to be 
mostly a contingency site. Fannie Mae 
is building another data center to 
replace the contingency center and 
will then evolve both centers to a “co- 
production environment,” says Stan 
Lofton, director of Wintel systems 
at the Washington-based mortgage 
financing company. 

“We have a few applications today 
that we consider dual-site production, 
in operation all the time, so if we lost 
one site, it would be seamless to the 
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user,” he says. “Over time, we see more 


and more applications going that way.” 
That approach helps avoid single 
points of failure and makes disaster re- 
covery faster and easier, says Joshua 
Aaron, president of Business Technol- 


| ogy Partners Inc. in New York. “And 


not having to consolidate all your real 


| estate in one location allows you to ne- 
| gotiate better deals in off-the-beaten- 
| path areas.” 


That approach is leading some com- 
panies to bring disaster recovery in- 
house, rather than using a service 
from another company, Sullivan says. 


| “You're seeing those disaster recovery 


facilities used also for development, 

testing and co-production,” he says. 
Co-production data centers carry 

with them the requirement of “contin- 


| uous availability,” says Terry Rodgers, 
| a facilities manager at Fannie Mae. In- 


creasingly, users are saying they can’t 


wait a few hours or even a few minutes 


to bring up their systems at a backup 


site if the main site is knocked out by a 


fire or some other disaster. Fail-over 
has to be instantaneous, and that’s 
both a software and a hardware issue, 


| Rodgers notes. 


| Redundancy Times Two 


Continuous availability requires a Tier 


| IV data center, as defined by The Up- 


time Institute. Tier IV requires two in- 
dependent electrical systems, all the 


| way down to dual power cables into 


the computer hardware. Fannie Mae’s 


| new data center will be built to Tier IV 


specs and will offer “real-time back- 
up,” Rodgers says. 
Visa U.S.A. Inc. has two 50,000- 


| square-foot-plus data centers in the 
| U.S., one on each coast. Either can in- 


stantly back up the other. Each center 
is rated as N+], which means that every 
system with n components has at least 
one hot spare. For example, if a data 


| center has six UPS modules in use, 


there will be a seventh standing by 
under the N+] principle. 





Within a year, Visa will migrate to 
a 2(N+1) architecture, in which every 
system is completely duplicated. In the 
above example, the data center would 
have two active UPS systems, each 
with separate cables to the equipment 
and each with N+] redundancy. 

“Ten years ago, N+] allowed for a 
component failure,” says Richard 
Knight, senior vice president for oper- 
ations at Foster City, Calif.-based Visa. 
“Now, with technology changes and 
everything dual-powered, the ultimate 
design is 2(N+1). It’s dual systems ver- 
sus dual components.” 

In addition to offering the highest 
levels of fault tolerance, 2(N+1) will 
enhance flexibility because an entire 
system can be taken down for mainte- 
nance, says Jerry Corbin, Visa’s vice 
president for central facilities. But, he 
says, “it also tremendously increases 
the complexity to be managed.” 


Communications Buildup 
Networking issues are also changing 
data center designs, and storage-area 
networks pose special challenges, 
Aaron says. “SANs typically attach 
to Fibre Channel switches, although 
IP SCSI is making inroads in the mar- 
ket,” he says. “Today’s Fibre Channel 
switches require their own infra- 
structure and must be planned for dur- 
ing data center design. They take rack 
space and consume a lot of power.” 
Indeed, communications considera- 
tions will increasingly influence data 
center design, Aaron predicts. “With 
the proliferation of voice over IP, the 
data center now has to support a very 
mission-critical application: voice,” he 
says. “How do you provide power to 
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| the IP phones? How do you handle 911 


service? How do you provide voice 
mail? How do you or will you support 
unified messaging?” 

Power-failure relays to support 911 
service haven’t traditionally been part 
of a data center design, but they will 
be, Aaron says, as will backup power 
gear for voice gateways, media gate- 
ways and IP phones. 


Unified Management 

IP networks bring relief as well as chal- 
lenges. Data centers are starting to con- 
nect environmental monitoring sensors 
to the data network so both facilities 
managers and IT managers have a uni- 
fied view of the health of all systems. 

Facilities equipment manufacturers 
use common data-exchange standards 
and network protocols to help bridge 
the facilities and IT worlds. For exam- 
ple, NetBotz Inc. in Austin sells IP- 
addressable wireless “monitoring ap- 
pliances” that can be fitted with secu- 
rity cameras, microphones and sensors 
for humidity, temperature and airflow. 
They can be read remotely or send 
alerts by e-mail. 

“The cost, size and complexity of 
these kinds of things has come down,” 
Aaron says. “Plus, they are now inte- 
grated with the network so you can see 
them across the WAN in a remote lo- 
cation.” @ 49777 


MORE ABOUT DATA CENTERS 


Visa extends monitoring: The company is moving 
toward end-to-end service-level monitoring in the data 
center - and beyond. QuickLink 49773 

Cool tools: Here are four ways engineers are dealing 
with balancing data center heat loads: 


e QuickLink 49775 
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URVIVES @ THRIVES 


The ‘legacy’ operating system maintains a substantial base in large organizations, 
and there’s promise of newinterest as it moves to 64-bit Itanium. By Drew Robb 


O penVM S was supposed 


to have died a slow and unheralded 
death sometime during the 1990s. 
Labeled passé by analysts and “legacy” 
by Windows and Unix enthusiasts in 
the wake of the distributed computing 
boom of the ’90s, it hardly merits a 
mention in the computer press. Yet the 
operating system has stubbornly re- 
fused to go away. 

Digital Equipment Corp. developed 
the Virtual Memory System in 1977 for 
VAX hardware as a multiuser, multi- 
tasking operating system. (Digital was 
eventually absorbed by Compaq Com- 
puter Corp., which merged with 
Hewlett-Packard Co. in 2001.) Open- 
VMS is a later version that runs on 
VAX and Alpha and will soon be avail- 
able on HP Integrity servers, part of 
the company’s 64-bit Itanium line. 

One of the perceived drawbacks 
contributing to the aura of doom 
around OpenVMS was the operating 
system’s tie to expensive proprietary 
hardware — first VAX, then Alpha. But 
now that Integrity servers — which 
also support HP-UX, Linux and Win- 
dows — run OpenVMS, its users will 
benefit from the same manufacturing 
economies of scale that users of those 
other operating systems do. 

Even now, however, annual Open- 
VMS-related hardware, software and 
services earn in excess of $2 billion an- 
nually for HP, and more than 400,000 
VMS systems are still operating world- 
wide, according to a source at the com- 
pany. Those numbers are backed up by 
Ken Farmer at OpenVMS.org, an inde 
pendent Web site dedicated to Open- 
VMS users. He estimates that there are 
10 million users worldwide and hun- 
dreds of thousands of installations of 
OpenVMS. 

“There were about 456,000 VMS 
systems almost a decade ago, and after 





a slight yearly decline for a few years, 
the operating system is now staging a 
revival,” says high-performance com- 
puting guru Terry Shannon, a 22-year 
VMS veteran in Amarillo, Texas, who 
wrote the original VMS user guide. 
“Some of the folks who drank the Win- 
dows Kool-Aid and dumped VMS for 


| Windows are now coming back.” 


| When the Chips Are Down 


OpenVMS/Alpha systems are com- 
monly used by financial services, 
health care, manufacturing and aero- 
space companies, as well as utilities 
and state lotteries and other govern- 
ment agencies. HP says that 50% of 


| major telecommunications providers 


and 80% of chip manufacturers use 
OpenVMS. Users say that they’ve 
stuck with OpenVMS because the op- 
erating system has provided all of the 
features they’ve needed, along with 
tested stability. 

“We chose VMS due to reliability, 
availability, solid performance, the fact 
that it’s mature and proven, and the 
stability of both the hardware and soft- 
ware,” says Joseph Stenz, senior sys- 
tems programmer/administrator at 


MANY ORGANIZATIONS USING VMS have a 
mix of Alpha as well as aging VAX hardware 
to deal with with HP porting VMS to Ita 
Ona Omi e A ) : 
nies must decide which wa 
on with VAX despite the | 
port and.a diminishing pool c 
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nium and scrap a significant investment in 
VAX/Alpha-based VMS sys ;? Here are a 
few rules of thumb for the various scenarios 
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Albert Einstein Healthcare Network in 
Philadelphia. “There were some IBM 
mainframe and Windows solutions of- 
fered, but they didn’t justify moving off 
of Alpha.” 

Einstein Healthcare will be installing 
a new AlphaServer ES47 this fall. It will 
be the third VMS/Alpha system within 
the 6,000-employee campus encom- 
passing six major facilities. Einstein 
Healthcare also has over 100 Windows 
NT/2000 servers in an enterprise 
LAN/WAN (frame relay/Asynchro- 
nous Transfer Mode) environment. 

Einstein Healthcare’s Alpha-based 
systems include an ES47 Model 2 
OpenVMS machine with two 1-GHz 
Alpha EV7 processors with 1.75MB 
Level 2 cache (four-processor capable) 
and 4GB of error checking and cor- 
recting memory. There’s also an HP 
AiphaServer ES47 Model 2 OpenVMS 
enterprise server with a memory ex- 
pansion up to 8GB, and an HP Alpha- 
Server ES47 Model 2 OpenVMS enter- 
prise server with memory expansion 
up to 8GB and optional RAID memory 
support. 

Einstein hasn’t clustered its Alpha 
environment, which also includes two 


a systems architect at XDelta 
Move from VAX to Itanium for “gener- 
al purpose” applications without hard- 
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HP MSAI1000 Fibre Channel storage 
arrays. 

The ES47 supports several applica- 
tions that demand reliability and high 
availability: Siemens Document Imag- 
ing 23.4 for billing purposes; IDXtend 
9.0 for physician billing and scheduling; 
and McKesson/HBOC Trendstar for 
decision support and cost accounting. 

Einstein Healthcare isn’t the only 
user gravitating toward Alpha. Annual 
sales of Alpha hardware add up to sev- 
eral hundred million dollars, according 
to HP. 


Rising to the Challenge 

A major impetus behind the VMS/ 
Alpha revival appears to be its perfor- 
mance during the Sept. ll attacks on 
New York’s World Trade Center. 

According to David Freund, an ana- 
lyst at IT research firm Illuminata Inc. 
in Nashua, N.H., several financial ser- 
vices businesses in the towers and nu- 
merous others in the immediate vicini- 
ty had OpenVMS disaster-tolerant 
clusters with backup sites outside the 
area. Every one of them had their oper- 
ations running just moments after the 
catastrophe, says Freund. 

Following that awful day, OpenVMS 
seems to have gained new prominence. 
In some IT circles, it’s now regarded as 
the créme de la créme in disaster re- 
covery and high availability, according 
to users and analysts. 

“OpenVMS uptimes can be mea- 
sured in years,” says Stenz. “This is 
certainly preferable to a culture of re- 
booting and disruption that plagues 
other platforms due to viruses, Tro- 
jans, denial-of-service attacks and end- 
less patching of systems.” 


OpenVMS Globalization 


It isn’t just U.S. companies that are re- 
maining on or rediscovering Open- 

VMS. The operating system has main- 
tained a strong hold overseas, accord- 


If you’re about to buy new Alpha hard- 
ware, buy with room for growth so that 
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Move from Alpha to Itanium-based 
systems if you gain advantages, such as 
performance (that’s probably a few years 
away) and.consolidation. Also 
support costs for Alpha, which will p 
rise above those for Itanium boxes. H 
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Why OpenVMS Hasn't Faded Away 


Performance 

OpenVMS can handle 3,000 simultane- 
ous active users and almost 2 million data- 
base transactions per minute on Oracle. 


Uptime 

It's quite normal for VMS cluster uptimes 
to be measured in years. User after user 
has verified this. 


Clustering 

OpenVMS offers shared-everything clus- 
tering, i.e., applications running on 96 
servers can simultaneously write to the 
same files on shared disks. If one server 
goes down, there's no data loss, and the 
application stays up. Similarly, two physi- 


| ing to Colin Butcher, a systems archi- 
| tect at systems integrator XDeita Ltd. 
| in Bristol, England, who has 20 years’ 


experience on OpenVMS for clients 
such as HP, Ikea International AS, the 
U.K.’s air traffic control service and the 
U.K. National Health Service. 

When Sony Corp. opened its Bar- 


| celona Center for Distribution (BCD) 

; in Spain 12 years ago, it trusted its busi- 
| ness-critical systems to VAX/VMS. 

| The facility is highly automated and 


runs 24 hours a day, six days a week in 
order to keep up with tight deadlines 
for the distribution of Sony and Aiwa 


| products throughout southern Europe. 


Daniel Sanchez Reina, BCD’s IT 
manager, lists the usual reasons for 


| choosing the operating system: its 


robustness, reliability, powerful fea- 
tures, high performance and memory 
management. 

“You get true clustering on VMS as 
the number of machines becomes 


| transparent to you; they work as a sin- 


e the first to use the new 
ss you have some pretty good 
‘Most applications will mi- 
PMA Neem siiie lag 

" says Bob Gezelter,-a 
t in New York. “Programs 
; | Alpha- or VAX-sp 

pically require modest changes 

If everything you need is supported on 
Itanium, then consider using it from Day 1, 
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striking an appropri- 
ate balance betwee nd-costs,” says 


aL 


cally separate data centers can be part of 
a single VMS cluster. This feature kept 
several Wall Street firms in business on 
Sept. 11, 2001. 


Disk Mirroring 

Known as volume shadowing on VMS, 
this feature mimics disk drives for applica- 
tions using a set of virtual devices. Syn- 
chronously mirrored write operations are 
transparent to users. 


Maximum Nodes 

OpenVMS can run a maximum of 96 
nodes in one cluster, far more than any 
Unix or Windows-based systems. That 
equates to over 3,000 processors. 


gle unit,” says Sanchez Reina. “This is 
made possible by the fast, powerful 
and clusterwide lock manager.” 

In 1998, BCD ported VMS from 
VAX to Alpha. It now runs a three- 
machine Aipha/VMS cluster in con- 
junction with a customs system and 
optical archive running on Windows 
2000 Server, an HP StorageWorks EVA 
5000 storage array and an Oracle Corp. 
database. 


Future Plans 


How much longer will OpenVMS re- 


} main viable? 


“Our intention is to keep on using 
VMS until doomsday, as long as it 
keeps innovating and providing the 
highest standards in the IT world,” 
says Sanchez Reina. “We have no plans 
to migrate to VMS on Itanium, at least 
for now.” 

That seems to be the consensus 
among IT shops: Stay on Alpha, milk it 


| for all it’s worth, and keep a close eye 


on developments in the VMS/Integrity 


| server space. 


Like BCD and many other users, Ein- 
stein Healthcare has no immediate 
plans to migrate. Stenz says he has a 
four-year lease on Aipha hardware and 
is unlikely to change during that period 

“We are going to adopt a wait-and- 
see approach to developments on Ita- 
nium and VMS,” he says. 

Meanwhile, HP has had OpenVMS 


| Version 8.1 in field testing on Itanium 


for many months. At the recent HP 
Worid Conference, it released Version 
8.2 for testing. The company expects 
the first shipments of OpenVMS/In- 
tegrity servers either late this vear or 
early nexi yeal 


intersite Distance Limit 

The maximum distance allowed between 
disaster recovery sites is 800 kilometers 
on OpenVMS, compared with 100 kilo- 
meters at best on other systems. 


Security 
Open VMS is “virtually unhackable,” says 
Ken Farmer of OpenVMS.org. Indeed, at 
the DefCon 9 Hacker Conference a couple 
of years ago, OpenVMS beat out Windows 
NT and XP, Solaris, Linux, BSD and others 
and was graded as unhackable by the best 
hackers in the business, according to 
Farmer. 

- Drew Robb 


Few anticipate significant problems 
in the system or in porting applications 
from Alpha to Itanium. 

“The OpenVMS APIs are so correct 
architecturally that the operating sys- 
tem has not required substantial 
change since its original design in 
1977,” says Bob Gezelter, a software 
consultant in New York who has tested 
the new system. “OpenVMS on In- 
tegrity is a case of seamlessly assimi- 
lating a new processor, not using a 
high-tech shoehorn to force an old ar- 
chitecture into an ill-fitting shoe.” 

XDelta’s Butcher has also tested 
Itanium/VMS. Other than needing 
some time to figure out the console in- 
terface, he says he found that VMS 
seemed to run and behave just as it al- 
ways does. 

Butcher does, however, express 
some reservations. “Performance 
might be an issue at the moment,” he 
says. “The big Alphas probably outper- 
form the larger Itanium boxes, but that 
will change with time 

Few Aipha users are in a hurry to 
make the switch. 

‘After seeing where the market anc 
technology direction is heading, we 
may adiust our direction after the thirc 
year of our tease,” says Einstem 
Heaithcare’s Stenz. “Depending on 
how things play out on Itanium 64 and 
VMS, we could very we! then migrate 
to that architecture or extend/augment 
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OpenVM 


was supposed 
) have died a slow and unheralded 
‘time during the 1990s 
1 passé by analysts and “legacy” 
indows and x enthusiasts in 
»f the distributed computing 
f the 90s, it hardiy merits a 
the computer press. Yet the 
ting system has stubbornly re 
yment Corp. developed 
ory System in 1977 for 
Ss a multiuser, multi 
g system. (Digital was 
eventually absorbed by Compaq Com 
pute! rp., which merged with 
Hewlett-Packard Co. in 2001.) Open- 
VMS is a later version that runs on 
VAX and Alpha and will soon be avail 
able on HP Integrity servers, part of 
the company’s 64-bit Itanium line. 

One of the perceived drawbacks 
contributing to the aura of doom 
around OpenVMS was the operating 
system’s tie to expensive proprietary 
hardware — first VAX, then Alpha. But 
now that Integrity servers — which 
also support HP-UX, Linux and Win- 
dows — run OpenVMS, its users will 
benefit from the same manufacturing 
economies of scale that users of those 
other operating systems do. 

Even now, however, annual Open- 
VMS-related hardware, software and 
services earn in excess of $2 billion an- 
nually for HP, and more than 400,000 
VMS systems are still operating world- 
wide, according to a source at the com- 
pany. Those numbers are backed up by 
Ken Farmer at OpenVMS.org, an inde- 
pendent Web site dedicated to Open- 
VMS users. He estimates that there are 
10 million users worldwide and hun- 
dreds of thousands of installations of 
OpenVMS. 

“There were about 456,000 VMS 
systems almost a decade ago, and after 


TECHNOLOGY 


a slight yearly decline for a few years, 
the operating system is now staging a 
revival,” says high-performance com- 
puting guru Terry Shannon, a 22-year 
VMS veteran in Amarillo, Texas, who 
wrote the original VMS user guide. 
“Some of the folks who drank the Win- 
] 


dows Kool-Aid and dumped VMS for 
Windows are now coming back.” 


When the Chips Are Down 


OpenVMS/Alpha systems are com 
monly used by financial services, 
health care, manufacturing and aero 
space companies, as well as utilities 
and state lotteries and other govern- 
ment agencies. HP says that 50% of 
major telecommunications providers 
and 80% of chip manufacturers use 
OpenVMS. Users say that they’ve 
stuck with OpenVMS because the op- 
erating system has provided all of the 
features they’ve needed, along with 
tested stability. 

“We chose VMS due to reliability, 
availability, solid performance, the fact 
that it’s mature and proven, and the 
stability of both the hardware and soft- 
ware,” says Joseph Stenz, senior sys- 
tems programmer/administrator at 


Our intention 

is to keep on 
using VMS until 
doomsday, as long 
as it keeps inno- 
vating and provid- 
ing the highest 
standards in the 
IT world. 


IT MANAGER, SONY CORP.'S 
BARCELONA CENTER FOR 
DISTRIBUTION 


Move to Itanium. ..orNot 


MANY ORGANIZATIONS USING VMS have a 
mix of Alpha as well as aging VAX hardware 
to deal with. So, with HP porting VMS to Ita- 
TLIO aan (elm COMA) (=e CI AVRSCcl AV com LD SMR OOO 
nies must decide which way to go. Soldier 
on with VAX despite the lack of reseller sup- 
port and a diminishing pool of spare parts, or 
port to Alpha? Retain Alpha systems for the 
seven remaining years HP promises to’sup- 
port them (HP says it will likely support Al- 
pha until at least 2011), and then see where 
to go from there? Or move everything to Ita- 


nium and scrap a significant investment in 
VAX/Alpha-based VMS systems? Here are a 
few rules of thumb for the various scenarios. 
1. Stay with VAX if you’re constrained by 
Ere Mme CM ctl ccm Oi ReISE Ost 
source code, special |/O hardware or large 
amounts of handcrafted assembler code. 
2. “Consider emulation of VAX - prefer- 
ably on an Alpha/VMS platform, not Win- 
TY eam] Ualom Ol 1a CO )Auurelalecom earl ecCea cig SIU 
and availability requirements of the appli- 
cation allow you to,” says Colin Butcher, 
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By Drew Robb 


Albert Einstein Healthcare Network in 
Philadelphia. “There were some IBM 
mainframe and Windows solutions of- 
fered, but they didn’t justify moving off 
of Alpha.” 

Einstein Healthcare will be installing 
a new AlphaServer ES47 this fall. It will 
be the third VMS/Alpha system within 
the 6,000-employee campus encom- 
passing six major facilities. Einstein 
Healthcare also has over 100 Windows 
NT/2000 servers in an enterprise 
LAN/WAN (frame relay/Asynchro- 
nous Transfer Mode) environment. 

Einstein Healthcare’s Alpha-based 
systems include an ES47 Model 2 
OpenVMS machine with two 1-GHz 
Alpha EV7 processors with 1.75MB 
Level 2 cache (four-processor capable) 
and 4GB of error checking and cor- 
recting memory. There’s also an HP 
AlphaServer ES47 Model 2 OpenVMS 
enterprise server with a memory ex- 
pansion up to 8GB, and an HP Alpha- 
Server ES47 Model 2 OpenVMS enter- 
prise server with memory expansion 
up to 8GB and optional RAID memory 
support. 

Einstein hasn’t clustered its Alpha 
environment, which also includes two 


a systems architect at XDelta. 

3. Move from VAX to Itanium for “gener- 
EB gue cMarl yer MOTE ate 
ware constraints, but don’t rush it. Spend 
time testing carefully, especially in high- 
availability and business-critical environ- 
ments. But if you're moving to Itanium, then 
port from VAX to Alpha first in order to de- 
bug any 32-/64-bit problems and get the 
code through the compilers. 

4. lf your Alpha machines have room for 
growth in terms of performance (for 
adding CPUs or memory), then staying with 
them while you spend a couple of years 
OETA R-ULOM CSN M [01m eg MULL ccmslcliciee 





HP MSA1000 Fibre Channel storage 
arrays. 

The ES47 supports several applica- 
tions that demand reliability and high 
availability: Siemens Document Imag 
ing 23.4 for billing purposes; IDXtend 
9.0 for physician billing and scheduling; 
and McKesson/HBO¢ 
decision support and cost accounting. 

Einstein Healthcare isn’t the only 
user gravitating toward Alpha. Annual 
sales of Alpha hardware add up to sev 
eral hundred million dollars, according 
to HP. 


Trendstar for 


Rising to the Challenge 

A major impetus behind the VMS 
Alpha revival appears to be its perfor 
mance during the Sept. ll attacks on 
New York’s World Trade Center. 

According to David Freund, an ana 
lyst at IT research firm Illuminata Inc. 
in Nashua, N.H., several financial ser 
vices businesses in the towers and nu- 
merous others in the immediate vicini 
ty had OpenVMS disaster-tolerant 
clusters with backup sites outside the 
area. Every one of them had their oper 
ations running just moments after the 
catastrophe, says Freund. 

Following that awful day, OpenVMS 
seems to have gained new prominence 
In some IT circles, it’s now regarded as 
the creme de la creme in disaster re- 
covery and high availability, according 
to users and analysts. 

‘OpenVMS uptimes can be mea- 
sured in years,” says Stenz. “This is 
certainly preferable to a culture of re- 
booting and disruption that plagues 
other platforms due to viruses, Tro- 
jans, denial-of-service attacks and end- 
less patching of systems.” 


OpenVMS Globalization 


It isn’t just U.S. companies that are re- 
maining on or rediscovering Open- 
VMS. The operating system has main- 


tained a strong hold overseas, accord- 


OM CNC mC MT Mic Mie mie ei 
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on if your porting plans don’t work out as in: 
tended. Such systems work well and are a 
known technology. “Alpha purchases are es- 
timated to still be in the double-digit thou 
sands of units sold each year,” says cons 
tant Terry Shannon. 

6. Move from Alpha to Itanium-based 
systems if you gain advantages, such as 
performance (that's probably a few years 
away) and consolidation. Also be aware of 
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rise above those for Itanium boxes. Howev- 
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Why OpenVMS Hasn't Faded Away 


OpenVMS can handle 3,000 simultane- 
ous active users and almost 2 million data- 
base transactions per minute on Oracle 


It's quite normal for VMS cluster uptimes 
to be measured in years. User after user 
has verified this. 


OpenVMS offers shared-everything clus- 
tering, i.e., applications running on 96 
servers can simultaneously write to the 
same files on shared disks. If one server 
goes down, there's no data loss, and the 
application stays up. Similarly, two physi- 


ing to Colin Butcher, a systems archi 
tect at systems integrator XDeita Ltd 
in Bristol, England, who has 20 years 
experience on OpenVMS for clients 
such as HP, Ikea International AS, the 
U.K.’s air traffic control service and the 
U.K. National Health Service 

When Sony Corp. opened its Bar 
celona Center for Distribution (BCD) 
in Spain 12 years ago, it trusted its busi 
ness-critical systems to VAX/VMS 
The facility is highly automated and 
runs 24 hours a day, six days a week in 
order to keep up with tight deadlines 
for the distribution of Sony and Aiwa 
products throughout southern Europ¢ 

Daniel Sanchez Reina, BCD’s IT 
manager, lists the usual reasons for 
choosing the operating system: its 
robustness, reliability, powerful fea 
tures, high performance and memory 
management 

“You get true clustering on VMS as 
the number of machines becomes 
transparent to you; they work as a sin 


amt ROC SIR CR RUM M ORS RU Mtl) 
systems unless you have some pretty good 
reasons to do so. “Most applications will mi- 
grate to Itanium with a minimum of effort, 
mainly recompilation,” says Bob Gezelter, a 
ROMO Oe STe CULM (clin Of eam C0101 ¢- LS) 
which contain special Alpha- or VAX-specific 
code typically require modest changes.” 

7. If everything you need is supported on 
PETTUS m secu 
but be aware that you'll be among the first to 
useit in a production environment. “It’s all 
about a$sessing risk and striking an appropri- 
ate balance between risk and costs,” says 
Biola 


cally separate data centers can be part of 
asingle VMS cluster. This feature kept 
several Wall Street firms in business on 
Sept. 11, 2001 


Known as volume shadowing on VMS, 
this feature mimics disk drives fer applica- 
tions using a set of virtual devices. Syn- 
chronously mirrored write operations are 
transparent to users. 


OpenVMS can run a maximum of 96 
nodes in one cluster, far more than any 
Unix or Windows-based systems. That 
equates to over 3,000 processors 


gle unit,” says Sanchez I 
made possibie by t 
and Clusterwide 

In 1998, BCD ported 
VAX to Alpha. It now r ; 
machine Alpha/VMS clust 
junction with < 


customs system 


optical archive running on Windows 
HP StorageWorks EV 


SOOO storage array and an Oracle Co 
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Future Plans 
How much longer will Open‘ 
main viable? 

Our intention is to Keep on 
VMS until doomsday, as lor 
keeps innovating and providing the 
highest standards in the IT world 


We have nc Pp 


says Sanchez Reina 


to migrate to VMS on Itanium, at leas 


for now.” 

That seems to be the consensus 
among IT shops: Stay on 
s worth, an 


for ail 1 kee pa 


on developments in the VMS/Integrit 


server space 
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plans to migrate. Stenz says he has ¢ 
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Open VMS is “virtually unhackable,” says 
Ken Farmer of OpenVMS.org. Indeed, at 
the DefCon 9 Hacker Conference a couple 
of years ago, OpenVMS beat out Windows 


hackers in the busine 


Farmer 
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Error Checking 
And Correction 


DEI 


INITION 


Error checking and correction (ECC) 
is the process of detecting 
errors during the transmission 
or storage of digital data and 
correcting them automatically. 
This usually involves sending or 
storing extra bits of data accord- 
ing to specified algorithms. 


BY RUSSELL KAY 
HENEVER we send 
data — whether it’s 
audio signals over a 
phone line, a data 
stream or a legal document — 
to someone else, we need to 
know that what arrives on the 
other end is identical to what 
we sent. Similarly, whenever 
we store data on disk or Te 
we need assurance 
when we retrieve it 
that it hasn’t been al- 
tered. Accurate data is 
absolutely essential 
for computations, 
record keeping, trans- 
action processing and online 
commerce. 

Unfortunately, storing and 
transmitting data both involve 
the actions of physical entities 
in the real world: electrons, 
photons, atoms, molecules, 


means there’s always some de- 
gree of uncertainty because 
background noise is ever pre- 
sent in our physical universe 
and might alter or corrupt any 
given data bit. 


Error Detection 

Early in the computer revolu 
tion, some powerful tech- 
niques were develoved 
detect and later to 


irst co 
orrect er 


| rors in data. The most obvi- 


| 


ous, and perhaps least effi- 
cient, way to find data changes 
is to repeat each unit of data 
multiple times and then com- 
pare the copies. This method 
is so inefficient that it’s not 
used for error detection — 
though the same idea is used 
in RAID-1 (disk mirroring) for 


| fault tolerance. 


QUICK, 
STUDY" 


The best-known 
error-detection method 
is called parity, where 
a single extra bit is 
added to each byte of 
data and assigned a 
value of 1 or 0, typical- 


ly according to whether there 
| is an even or odd number of 


| calculates what the 


“1” bits. The receiving system 
parity bit 


| should be and, if the result 

| doesn’t match, then we know 
| that at least one bit has been 
wires, contacts and more. This | 


changed, but we don’t know 
which bit is wrong. It’s also 


ly correct and the parity bit is 


| garbled. If two bits have been 


altered, however, the changes 
cancel out the data will be 
wrong Dut the parity bit won't 
signal an erro! 

Two other established er 
ror-detection techniques are 
*hecksum (add up all the bits 


» rhe entire message. docu- 





ment or program and produce 
a single sum) and cyclic re- 
dundancy check, which oper- 
ates on groups of bits at a time 
and uses division, not addi- 
tion. Checksums and CRCs 
are calculated before and after 
transmission or duplication 
and then compared. However, 
checksums and CRCs alone 
can’t verify data integrity, 
since the algorithms are 
known and it’s possible to in- 
troduce intentional changes 
that these methods won’t de- 
tect. A more secure way 
would involve cryptographic 
hash functions, one-way math- 
ematical operations whose use 
of secret encryption keys pre- 
cludes making undetectable 
alterations. 


Error Correction 


| Thus techniques exist that 
| will let us find errors in our 


data, but then what? One way 
to get the right stuff is just to 


| ask the sending party or de- 


vice to resend it. If there are a 
lot of errors or there is a long 
communications path, howev- 
er, such as when we're sending 


data halfway around this noisy | 
| planet, retransmission can 


dramatically slow down com- 
munications. 
What’s needed is a system 


| that will find any errors and 


correct them automatically. It 
turns out that we can create 


| such algorithms (known as 


error-correcting codes, which 


| is the other phrase that ECC 
possible that the data is entire- | 


sometimes stands for) at any 


| degree of precision we want, 


but with a trade-off in efficien- 
cy. Most of the time, we settle 
for codes that can detect and 
correct errors in one bit and 
detect but not correct errors 
in two or more bits. (A simple 
illustration of how this works 
with 4 one-blr error ts shown 
in tne 90x above.) 
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ECC ADDS multiple parity bits, tncugh calculations are usually applied to 
complete words (typically 32 or 64 bits), not single bytes. Each ECC bit rep- 
resents the parity of a different subset of the data bits, and each data bitis 
normally included in more than one ECC bit. This lets us detect a 1-bit 

error, identify the offending bit and fix it. It also lets us detect but not correct 
2-bit error. (For an example of how ECC detects and corrects a 2-bit 

error, go to QuickLink 50352 on our Website.) 

To see how ECC works in a very simplified form, let's look at a 7-bit chunk 
of binary data. To this we add three more bits for ECC data, each calculated 
as the parity bit for a subset of the seven bits. Figure 1 shows the three 
subsets, with sample data and the calculated ECC bits: 


it aa _ BEB ee 





Subset 2 value 
Subset 3 value 





To simulate an error, let's alter the third bit from 1 to 0. Now the received data 
looks like Figure 2, with differences in red: 


FIGURE 2 VENER 
RECEIVED DATA — ws 
Subset 1 bit 
Subset 2 bits 
Subset 3 bits 
Subset 1 value 
Subset 2 value 
Subset 3 value 


ae 








We can see that the first calculated ECC bit doesn’t match, so we know 
there's an error. Because ECC 1is the mismatch, this tells us that the error 
can’'tbe in Bits 1, 2, 4 or 5 (yes, that seems counterintuitive, but parity can be 
like that). This leaves only Bits 3, 6 and 7. How do we tell which? The three 
subsets of the data bits used to create the ECC bits in this example were 
chosen so that changing any single data bit produces a different ECC value 
than changing any other data bit. 

If we assume the error is in Bit 7, we can change it and recalculate the 
ECC values as 110. Since that doesn't match the received 100, we try Bit 6, 
which gives us 101, also not a match. This leaves Bit 3; changing its value 
gives us the correct ECC bits and confirms the correct data. 


Today, ECC is used in many 
different devices, from CD 


bandwidth and throughput of 
wireless channels will remain 
players to computers. Perhaps | considerably lower than those 
its best-known use isin spe- _| of hard-wired connections. 
cial ECC RAM for servers, in | @ 50127 

which extra bils:are designed |) 
directly into the dynamic 
RAM chips. 

Looking to the future, ECC 
could gain increased visibility 
and adoption in the wireless 
-ommunications market. 
That’s because the popularity 
»f wireless communications 
and the availability of wireless To find a complete archive of our 
products are both predicted to | QuickStudies, go online to 
grow considerably, but the | computerworld.com/quickstudies 


| Kay is a Computerworld con- 
tributing writer in Worcester, 
| Mass. You can contact him at 
| russkay@charter.net. 
ee ee 
Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 
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Lack of Control 
Becomes Nightmare 


Our security manager discovers that finding | 


out what’s really going on in the network is 
a daunting task. By C.J. Kelly 


HAD A BAD DREAM the oth- 
er night. In it, I was sleep- 
ing in the back seat of a 
convertible. I woke up be- 
cause the air had gotten chilly 
and the car was swaying. I 
rubbed my eyes and tried to 
shake the cobwebs out of my 
mind as I peered into the front 
seat. No one was driving. I 
scrambled over the front seat 
and took the wheel, only to 
discover that I had no 
control over the car. 
It’s not that the car 
was careening out of 
control; it had a mind 
of its own. It was 
steadily taking me 
up a steep, winding 
mountain road with cliffs on 
either side. The road got nar- 
rower and narrower before 
the car finally came to a stop. 
I looked around and suddenly 
became very afraid. Then I re- 
fused to continue the night- 
mare and woke up. 

We could spend some time 
interpreting it, but I think it’s 
pretty clear that this dream 
represents how I feel about 
managing information secu- 
rity. I’m driving, but I don’t 
have control; we haven’t gone 
off a cliff, and I’m not going to 
be happy if we do. I have a 
company’s information assets 
to protect, and I don’t want to 
have to notify our customers 
that their personal informa- 
tion has been exposed or de- 
liver the news that our net- 
work just got “owned.” To 
keep the bad dreams at bay, 
I’m going to have to make 
some changes. 


For starters, I had it out with | 
my boss the other day and told | 


her that I wanted complete 
control over all network secu- 
rity operations, including fire- 


cen 
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| wall, virtual private network 

| (VPN), router and domain 

| access administration. Those 

| things are currently managed 

| by IT operations, not security 
operations. I need additional 

| head count. I need tools. And I 

| want an organizational change. 

| I don’t care about policy. I 
don’t care about process and 
procedure (Sarbanes-Oxley be 
damned). I care about doing 

what it takes to se- 

cure my company’s 

information assets. 
What brought me 

to this point? In my 

last column, I was 

fighting the virus 

war. It’s going well. 

| We hired a contractor that 

does nothing but track down 

infected systems, scan them 

for viruses and spyware, and 


| apply operating system patch- 


es. You may ask, “Why in the 
world isn’t that automated?” 
It’s a long story, but remem- 
ber, I inherited this network. I 
didn’t build it. 

| The enterprise antivirus 
system is scheduled for an up- 
| grade within the next week or 
two, and that should allow for 


| tighter controls and less man- 


ual effort. The suspicious traf- 
fic identified by the outside 
consultants that I had attrib- 

| uted to viruses and Trojan 


| had it out with my 
boss and told her | 
wanted complete con- 
trol over all network 
security operations. 
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horses seems to have stopped. 
IT has a number of projects 


| under way for upgrading the 
| infrastructure at the server 
| and desktop levels. My team 


has been actively involved in 


| these projects and has provid- 


ed the security requirements. 
Until these projects are com- 
pleted, my job is much tougher. 
Which brings me to my cur- 
rent frustration. 


Clueless 

We have no idea what is real- 
ly going on in the network. 
(Please, all you security folks 
out there who have the tools 
and bodies, no need to re- 
spond.) We discovered that our 
network intrusion-detection 
system (NIDS) is seeing only 
50% of our network traffic. The 
problem is that we’ve been re- 
lying on port spanning to do 
the job. The theory behind 
port spanning is that a copy 

of every packet that traverses 
the switch is sent to a monitor- 
ing port. 

We use a switch port analyz- 
er (span) and remote span to 
copy the traffic from our vari- 
ous switches to the port where 
our probe resides. The NIDS 
passively monitors the traffic 
and generates alerts based on a 
rule set of undesirable activity. 
Trouble arose because of ses- 
sion limits, switches that don’t 
have the capability of carrying 
the rspan traffic and other 
technicalities. We also found 
ourselves in a tug of war with 
IT over the span ports them- 
selves. When you get an alert 
from the NIDS that says zero 
events, you know something’s 
wrong. Did IT just snag our 
span port? We began to re- 
search other methods of “see- 
ing” all the traffic. 

What we needed was a way 
to tap into the network traffic, 
something that would aggre- 
gate full-duplex traffic into a 
single data stream that our 


| NIDS, based on the freely 
available Snort program, could 
take advantage of. 

We found some good basic 
information online at Talisker 
Security Wizardry (http:// 
securitywizardry.com/taps.htm) 
| and selected a product to test 
in our environment. Net Op- 
tics Inc. in Sunnyvale, Calif., 
has a port aggregator tap that 
appears to allow full-duplex 
monitoring with a single net- 
work interface card and has a 
| buffering method for handling 
traffic overload. 

Next, we had to decide 
where to deploy the taps. Cer- 
tainly, we would initially de- 
ploy one at the firewall, one in 
the demilitarized zone, one to 
monitor VPN traffic, one to 
monitor WAN traffic and sev- 
eral on critical LAN segments. 

Ah, but how much is this 
going to cost? Each tap costs 
about $950. That seems high, 
but I'd rather pay more for a 
high-powered, fully functional 
device than Mickey Mouse 
with less expensive devices 
that don’t give us what we 
need. And to think we were go- 
ing to spend quite a chunk of 
change on event correlation 
software because we thought 
we were seeing all the traffic. 

The good news is that we 
discovered a serious issue and 
found a way to address it. The 
timing was perfect because I 
was able to adjust the budget 
forecast to include the solu- 
tion. The bad news is that I 
still need to find a way to con- 
vince my manager that net- 
work security is a serious is- 
sue. To be effective at protect- 
ing the company’s information 
assets, we need complete con- 
trol over IT security opera- 
tions. This would require an 
organizational change at the 
highest levels of the company. 
The political implications of 
such a change are as daunting 
as the tasks at hand. D 


| 


rity manager, “C.J. Kelly,” whose name 
and employer have been disguised for 
obvious reasons. Contact her at mscjkelly@ 
yahoo.com, or join the discussion in our 
forum: QuickLink a1590 


To find a complete archive of our 


Security Manager's Journals, go online to 
| @computerworld.com/secjournal 
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Ascential to Develop 


New User Interface | 


® Data integration application 
vendor Ascential Software Corp. 
in Westboro, Mass., last week an- 
nounced a new self-adapting in- 
terface for its Enterprise Integra- 
tion Suite. The interface will be 
able to anticipate users’ tasks 
and offer execution guidance, ac- 
cording to the company. It will be 
in beta in the first quarter of 2005. 


Sendmail Offers 
Content Manager 


= Mailstream Content Manager 
from e-mail security vendor 
Sendmail Inc. is available now. 
The product features e-mail con- 
tent policy management and anti- 
spam and virus protection. It also 
has a management console that 
allows business-specific policies 
to be easily changed or added, 
according to the Emeryville, 
Calif., company. The application 
starts at $16,000 for 500 users, 
with a one-year antivirus and 
antispam update subscription. 


Microsoft Releases 
Migration Tool Kit 


= Microsoft Corp. released a free, 
downloadable migration tool kit 
for the Virtual Server Migration 
2005 software it recently re- 
leased. The Virtual Server 2005 
Migration Toolkit enables users 
with server hardware running 
Windows NT 4.0, Server 2000 or 
Server 2003 to migrate to a vir- 
tual machine environment run- 
ning on Virtual Server 2005. The 
tool kit is also intended to help 
users migrate VMware Inc.’s vir- 
tual machine software to Micro- 
soft’s Virtual Server 2005. 


Inovis Certifies 
Interoperability 

® Inovis Inc. announced that its 
BizManager 3.0 trading partner 
connectivity software has been 
certified for Applicability State- 
ment 2 interoperability. BizMan- 
ager 3.0 will be generally available 
in December, the Alpharetta, Ga.- 
based company said. 
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Make Vendors Pay 
For Security Flaws 


NFORMATION INSECURITY is costing us bil- 
lions. We pay for it in theft — information and 
financial theft. We pay for it in productivity loss, 
both when networks stop working and in the 
dozens of minor security inconveniences we all 
have to endure. We pay for it when we have to buy se- 
curity products and services to reduce those other two 
losses. We pay for security, year after year. 
Unfortunately, all the money we’re spending isn’t 
fixing the problem. We’re paying, but we still end up 
with insecurities. The problem is insecure software. 


It’s bad design, poorly im- 
plemented features, inade- 
quate testing, and security 
vulnerabilities from soft- 
ware bugs. The money we 
spend on security goes to- 
ward dealing with the ef- 
fects of insecure software. 
And that’s the problem. 
We're not paying to im- 
prove the security of the 
underlying software. We’re 
paying to deal with the vul- 
nerabilities rather than 
eliminating them. 
The only way to improve 
the situation is for the ven- 
dors to fix their software, 
and they won’t do that until it’s in 
their financial best interest to do so. 
Today, the costs of insecure software 
aren’t borne by the vendors that pro- 
duce it. In economics, this is known as 
an externality: the cost of a decision 
that’s borne by people other than 
those who are making the decision. 
There are no real consequences to 
the vendors for having bad security or 
for having low-quality software. Even 
worse, the marketplace often rewards 
low quality. More precisely, it rewards 
additional features and timely release 





dates, even if they come at 
the expense of quality. 

If we expect software 
vendors to reduce the 
number of features in their 
products, lengthen devel- 
opment cycles and invest 
in secure software devel- 
opment processes, it needs 
to be in their financial best 
interest to do so. If we ex- 
pect corporations to spend 
significant resources on 
their own network security 
— especially the security 
of their customers — it 
needs to be in their finan- 
cial best interest to do so. 

Liability law is one way to make im- 
proving security in the best interests 
of those organizations. 

The risk of liability raises the costs 
of doing it wrong and therefore in- 
creases the amount of money a CEO is 
willing to spend to do it right. Security 
is risk management; liability fiddles 
with the risk equation. 

Basically, we have to tweak the risk 
equation so a vendor’s CEO cares 
about actually fixing the problem. And 
putting pressure on his balance sheet 
is the best way to do that. 





Clearly, this isn’t all or nothing. 
There are many parties involved in a 
typical malicious attack. There’s the 
company that sold the software with 
the vulnerability in the first place. 
There’s the person who wrote the at- 
tack tool. There’s the attacker himself, 
who used the tool to break into a net- 
work. There’s the owner of the net- 
work, who was entrusted with defend- 
ing that network. 

One hundred percent of the liability 
shouldn’t fall on the shoulders of the 
vendor, just as one 100% shouldn’t fall 
on the attacker or the network owner. 
But today, 100% of the cost falls direct- 
ly on the network owner, and that sim- 
ply has to stop. 

We will always pay for security. If 
software vendors have liability costs, 
they’ll pass those on to us. It might not 
even end up being cheaper than what 
we're paying today. But as long as 
we're going to pay, we might as well 
pay to fix the problem. Forcing the 
software vendor to pay to fix the 
problem means that it might actually 
get fixed. 

Currently, there is no reason for a 
software company not to offer feature 
after feature after feature. Liability 
forces software companies to think 
twice before changing something. 

It forces them to protect the data 
they’re entrusted with. Liability means 
that those in the best position to fix a 
problem are actually responsible for 
that problem. 

Information security isn’t a techno- 
logical problem, it’s an economics 
problem. And the way to improve in- 
formation technology is to fix the eco- 
nomics problem. Do that, and every- 
thing else will follow. @ 50161 
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DB2 DOESN'T LOCK YOU IN. 


Why not move up to middleware that 
makes sense? Through the end of the 
year, you can get IBM DB2 Universal 
Database by taking advantage of 

our extremely compelling trade-up 
promotion. Visit ibm.com/db2/swap 
today to find out if you qualify. 
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Watch Your Weblog 


Dangers lurk in corporate 
weblogs, and sponsoring 
or creating one is rife with 
legal liabilities. Here are 
some precautions you 


should take. Page 40 


EMENT 


Think Tank 


A deeper dive into Alinean’s ROI 
calculations; an unorthodox ex- 
amination of the skills the “gamer 
generation” will bring to the 
workplace; and a new look at IT 
buyer intentions. Page 42 


OPINION 

What’s the Problem? 

Too many people look for a solution when 
they haven't yet identified the problem, says 
Paul Glen. In their role as problem solvers, 
IT leaders need to help their clients elimi- 
nate this fuzzy thinking. Page 44 





OUTSOURCING 


‘tuneu 


CHANGING NEEDS CAN MAKE LAST YEAR'S OUTSOURCING STRATEGY OBSOLETE. 


ASK THESE 10 QUESTIONS 10 KEEP IT ON THE MARK. BY MARY BRANDEL 


ANY COMPANIES that sign on 
for outsourcing services file 
away the contract and pull it 
out only when the three-, five- 
or 10-year term comes to an 
end. But it’s important to 
regularly review not only 
whether the original contract 
is still meeting your needs but 
also whether last year’s outsourcing plan is 
still relevant to this year’s business strategy. 
“Outsourcing has become an integral part of 
our IT governance strategy,” says Pavan 
Nigam, CEO of Cendura Corp., a Mountain 
View, Calif.-based application management 
firm. “Once you accept that, you realize it 
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THE 
MECHANIC 


Tuning up your outsourcing 
strategy requires a skilled 
mechanic with “more than 
the ability to squeeze ven- 
dors,” say Robert McNeill, 
Marc Cecere and Adam 
Brown in “Building the Ven- 
dor Management Function,” a 
March 2004 report from For- 
rester Research Inc. 

The person who develops 
and reviews the outsourcing 
strategy should report to the 
CIO, they say. He needs to 
understand the strategic di- 
rection of the organization, 
how the business is run, how 
to negotiate with experts and 
how to form alliances. Here 
are some other skills they see 
as key to this position: 


® Strong oral and written 
communication skills 


® Contract negotiation skills 
for complex agreements 


@ The ability to work with 
executive management 


®@ Knowledge or background 
in metrics and measurement, 
with particular emphasis on 
service-level agreements 


@ Experience with various 
outsourcing and services 

offerings, and pricing and 
delivery structures 


@ Understanding of and 
experience with financial 
reporting 


™ Knowledge of and experi- 
ence with enterprise license 
agreements 


Purchasing personnel 
aren’t good candidates for 
this role because they lack a 
strong background in IT, the 
authors say. Good candidates 
include IT managers and 
business unit executives with 
IT backgrounds. 

- Kathleen Melymuka 


MANAGEMENT 


needs to be reviewed not on an annual 
but on a quarterly basis.” 

“Too often, [an outsourcing con- 
tract] becomes shelfware,” says Lorrie 
Scardino, research director at Stam- 
ford, Conn.-based Gartner Inc. “I tell 
clients they should get into the habit of 
reviewing [their outsourcing strategy] 
every six months.” 

Mergers, acquisitions, divestitures, 
changes in the trading community or 
governmental regulations — all of 
these circumstances should trigger an 
outsourcing strategy review. With that 
in mind, here are 10 questions you 
should ask when updating your com- 
pany’s IT outsourcing strategy. 


Is the business trying to expand 
overseas or enhance its global im- 
age? If your company has no 
previous experience overseas, 
this is a particularly good time 
to consider partnering with an 
offshore technology provider. 
“If you are looking to do business in, 
say, Asia, you might very well want to 
outsource to a provider that could help 
you do business in that part of the 
world,” says Wendell Jones, a senior 
consultant at Cutter Consortium in 
Arlington, Mass. 

A global company should also con- 
sider using a combination of its own 
staff and offshore resources when try- 
ing to polish its global image. But be 
wary of exceeding a 70-30 ratio of off- 
shore to internal staff for software de- 
velopment projects, he says. Letting 
more than 75% of the development 
work go offshore can lead to serious 
difficulties, since off-site programmers 
may not be as skilled as on-site staff. 
Also, off-site workers might not be as 
sensitive to issues such as integration 
with existing systems or changing user 
requirements. 

Cost cutting alone is not enough rea- 
son to look offshore, warns Nigam, who 
says Cendura plans to expand into Asia 
and Europe in the next 12 months. “I’ve 
seen SO Many companies get excited 
about hiring someone for $25 an hour, 
but chances are high that they’ll need 
four bodies to complete the work of 
one of their own workers,” he explains. 
“If you make the investment right, you 
might get the ratio down to 1.5-to-1, but 
you'll never get a 1-to-1 ratio.” 


Are new business initiatives likely 
to overload your IT staff? When 
new projects threaten to over- 
whelm the IT staff at J.B. 
Hunt Transport Inc., a trans- 
portation logistics company 
in Lowell, Ark., CIO Kay 





Palmer looks for rote work that she 
can contract to an outsourcing suppli- 
er. Typical examples include convert- 
ing files, expanding fields and translat- 
ing reports into different languages. 
The alternative — outsourcing new 
projects — doesn’t work as well, 
Palmer says. The last time J.B. Hunt 
tried to do that, the business side was 
still working on requirements defini- 
tions midway through the project, re- 
sulting in scope creep that the out- 


| sourcer couldn’t manage or control. 


The development work was brought 
back in-house within a year. “I’ve 
learned that unless requirements are 
very well defined and there’s not a lot 
of tie-in with existing systems, out- 
sourcing is hard to do,” Palmer says. 
Also look at the maturity of the 


| project when considering outsourcing, 


says Nigam, who co-founded Health- 
eon (now WebMD Inc.). “If you’re in 
the early stages of product develop- 
ment, it requires close collaboration 
with customers as well as domain ex- 
pertise,” he points out. While Nigam 
was at Healtheon, two-thirds of out- 
sourced work was Release 3.0 or be- 
yond, he says. 


Is the company preparing to un- 
dertake a critical business objec- 
tive with a tight deadline? It can 
make sense to outsource a 
new project when the work is 
extremely time-sensitive or 
critical to gaining new busi- 
ness. At St. Luke’s Medical Center in 
Kansas City, Mo., CIO John Wade de- 
cided to outsource the IT component 
of opening a “digital hospital” by the 
end of next year. 

“It’s an enormous workload,” Wade 
says. The project includes implement- 
ing three new software products, 
determining the benefits of those 
systems and then retrofitting them 
into five other St. Luke’s locations, 
which would also entail standardizing 
those hospitals’ procedures, he says. 
“There was no way to do it unless we 
hired 15 people and trained them, and 
even then, our risk of not being able 
to make the date was significant,” 
he adds. 

A similar situation occurred at 
Cendura, when a prospective client 
requested customized features in a 
software product. “We figured we 
couldn’t win the deal using our highly 
leveraged resources in the U.S., but 
taking it offshore gave us extra flexibil- 
ity,” Nigam says. “If we had to apply 
very expensive resources, it would 
have made the deal less feasible 
for us.” 
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Is the company planning to en- 
gage in new lines of business? 
Companies that have existing 
outsourcing relationships 
need to review these con- 
tracts when starting a line 
of business, says Brad Smith, 
vice president of research at Kennedy 
Information Inc., an information 
source on professional services in 
Peterborough, N.H. For example, if a 
retail bank that outsources call center 
activities was expanding into broker- 
age, insurance or other financial ser- 
vices, that would require a whole 
different set of call center training 
and activities. 

Similarly, if a U.S.-based company 
was to expand into a new region, such 
as Asia, calls could begin coming in 
24 hours a day as opposed to 12. 
“Those changes need to be anticipat- 
ed,” Smith says. 


Are there areas of IT that don’t in- 
teract with other departments or 
customers? J.B. Hunt’s Palmer 
says in-house staffers add 
great value when they regu- 
larly interact with customers. 
For instance, a database ad- 
ministrator who knows the extent to 
which the business is affected when a 
table isn’t available may create a work- 
around to make the data available 
more quickly. Or the help desk staff 
may regularly inform the quality assur- 
ance team about the problems it’s ad- 
dressing, thereby helping to improve 
system design. 

“In that way, they’re of much more 
value than just answering calls and tak- 
ing care of problems,” Palmer says. “If 
you have that level of integration, you 
can justify paying for people locally.” 

On the other hand, she says, if there 
are areas where you don’t have that re- 
lationship, it doesn’t make sense to pay 
a premium to keep it in-house. 


How efficient are your IT opera- 
tions? Earlier this year, Wade 
completed the process of 
determining whether to out- 
source part or all of his orga- 
nization’s IT function. He 
bases such decisions on four 
sets of metrics: the quality of St. Luke’s 
IT operation, quantity of current IT 
projects, quantity of IT projects over a 
five-year time frame and price of deliv- 
ering IT services to core constituents 
over five years. 

Wade would choose to outsource if 
an outsourcing vendor could hit the 
same metrics as St. Luke’s internal IT 
department and reduce operational 
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costs by 17% over five years. He sets 
the bar high because in a long-term re- 
lationship such as outsourcing, a fore- 
cast 17% savings would likely turn into 
about 8.5% over a five-year period, he 
says. “That’s not an easy job if, on top 
of that, [the vendor] also has to make < 
20% to 30% profit,” Wade sz 

years ago, the best offers were a 4.5% 
overall cost reduction and a 7% cost 
reduction in labor only. This year, 
Wade says, no one even responded to 
his request for proposals. 

Still, Wade faithfully conducts this 
review every three years. “You have a 
responsibility as CIO to say you're pro- 
viding the most cost-effective service 
you can,” he says. “If I could outsource 
the network at a cost-effective level, I 
would do it because internally, it’s a 
major strain on the IT group.” 


Have outsourcing trends changed? 
Palmer keeps her eyes and 
ears open to what her peers 
and competitors are doing on 
the outsourcing front. That 
includes listening for new 
trends in outsourcing options. 
“At times, the options that were avail- 
able a few years ago may have been re- 


| placed by something that’s more palat- 


able,” she says. 


For instance, J.B. Hunt looked into 


| call center outsourcing a few years ago 
| but decided that its customers really 


needed to feel they were talking with a 
local company representative, local ac- 


| cent and all. This year, after attending 
| acomputer conference, Palmer heard 


about call center outsourcers in rural 
Arkansas [QuickLink 49795]. After re- 
viewing cost vs. benefits, she deter- 


| mined that it wasn’t worth it, but this 
| type of networking may eventually 
| lead to a workable alternative. 


Have there been changes in the IT 
talent market? Even in these 
tough economic times, it’s im- 
portant to keep an eye on IT 
labor costs and supply. “Be- 
fore I would look at outsourc- 
ing an entire function, I would 
expect to be faced with issues such as 
high cost of hire, escalating people 
costs that are out of control and high 
| turnover,” Palmer says. J.B. Hunt’s 
| turnover is only 4%, and salary costs 
are reasonable, so outsourcing isn’t 
tempting now. 


Is your current outsourcing ven- 
dor meeting its benchmarks and 
offering competitive pricing? It’s 
not easy to determine if the 
deal you signed on for is still 
a good one a couple of years 
into it. Other outsourcers 
won't rush to provide you with a com- 
petitive bid, knowing that you’re still 
tethered to a deal, says Bob Tevelson, 
| a vice president at A-T. Kearney Inc., 
| a management consulting firm in 
Chicago. 

Start by checking whether the con- 
tract requires you to buy more service 
than you need or to spend more on it 

| than you should. Though your contract 
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may not allow you to bring services 
back in-house, there should be enough 
flexibility to change service levels, skill 
sets or the location of workers. For in- 
stance, Tevelson says, “you can work 
provider to selectively shift 
applications offshore to support the 
objective of cost reduction.” 


Are your strategic objectives 
still being met through the 
arrangement? “You 
thought it was good deal 
when you got into it, 
but the k chairs 
shifted on the ship, and 
now what do you do?” Tevelson asks. 
It’s difficult to prematurely terminate 
an outsourcing contract, so experts 
recommend building in terms to the 
deal that accommodate changing busi- 
ness needs. For instance, what if you 
outsource your call center function 
and ther est a particular business 
unit, leading to a drop in call volumes? 
“In a productive relationship, the 
parties will try to renegotiate terms 
and conditions to make up for the lost 
volume,” Scardino says. After all, it’s 
important that the outsourcing rela- 
tionship remain mutually beneficial. 


@ 50044 


Brandel is a Computerworld contribut- 
ing writer in Grand Rapids, Mich. Con- 
tact her at mary.brandel@comcast.net. 


Your data runs a 
mee 





40 COMPUTERWORLD November 1, 2004 


ORE AND MORE PEOPLE 
are jumping on the cor- 
porate weblogging band- 
wagon. At Microsoft 
Corp., for example, there 
are currently more than 
1,000 biogs. Like many 
companies, especially the IT vendor 
companies where weblogs tend to pro- 
liferate, Microsoft encourages the in- 
formal sites as a way for its employees 
to stay close to customers. 

But as weblogs have multiplied, a 
number of legal issues have arisen, and 
regardless of whether your company 
sponsors its bloggers, it may be open- 
ing itself up to hidden liabilities. Here 
are some of the dangers of corporate 
blogging and precautions companies 
should consider. 


libel. Bloggers 


who write anything negative or defam- 
atory about a corporation or an indi- 
vidual are opening themselves and 
their companies up to the possibility of 
libel suits, says David Carr, an attorney 
and partner at London-based consult- 
ing firm Big Blog Co. 

PRECAUTION: Do your homework. If the 
blogger is going to make negative state- 


ments about a company’s or individual’s | 


business activities, Carr says, “he’s real- 
ly got to do his research and make sure 
what he’s saying can be proven to be 
true and not just believed to be true.” 


COT os. 
trade secrets or 
confidential information. Employees who 
blog may intentionally or unintention- 
ally share company secrets, says em- 
ployment attorney Michael Karpeles, a 
principal at Chicago-based law firm 
Goldberg, Kohn, Bell, Black, Rosen- 
bloom & Moritz Ltd. Information such 
as the finances or marketing and busi- 
ness strategies of the employer can 
cause damage to the company if it gets 
into the wrong hands. And a blogger 
who lets slip personal information 
about other employees may be open- 


Blog: (noun) a contraction 
of Web log, an online journal of 
chronologically displayed information 
such as ideas, observations and 
opinions, presented in an 
informative but informal and 
accessible style. Maintaining a 
eb log is described as blogging, 
and the person contributing and 
administering such a Web site 
is called a blogger. Blogs are public 
and searchable on the Internet. 
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ing the organization to prosecution for 
privacy infringements. 

PRECAUTION: Have employees sign a 
confidentiality agreement that states they 


| will not disclose company confidential in- 
| formation, Karpeles says. “Even if they 


haven’t signed an agreement, most 


| states have a trade-secrets protection 


law that would prohibit individuals 


| from misappropriating trade secrets,” 
| he says. But better to caution them up- 


YOUR -—— 


front than prosecute them later. 


ments about the 


business that can be used during litiga- 
tion. Anyone, from the CEO to the re- 
ceptionist, can have a blog, whether it’s 
related to the company’s Web site or 
not, so organizations don’t know what 


| information is out there that could 


hurt them, says Gregory Rutchik, 
founding partner of The Arts and 
Technology Group, a litigation and 


| transactional law practice in San Fran- 
| cisco. “But the reality is, if you allow 


your employees to blog, the likelihood 
that things are going to come back to 


| hurt you is huge,” he says. 


Attorney Diana McKenzie agrees. “If 


| the company is encouraging blogging, 
| the first thing I would worry about is 


discovery,” she says, referring to the 
compulsory disclosure of pertinent 
facts or documents to the opposing 
party in a civil action. 

“Blogging is one of the most fertile 
grounds in discovery for supporting 
any position, because you have a bunch 
of people never conscious of how this 
could be used against a company,” says 
McKenzie, who chairs the information 
technology group at law firm Neal, 
Gerber & Eisenberg LLP in Chicago. 

PRECAUTION: Companies that have 
their own blogs should consider how they 
fit into the business plan, and they should 
craft policies to let employees know what 
they can and can’t write, says Rutchik. 

Karpeles says an employer should 
create policies and guidelines about 
what can be included on an employer- 
sponsored weblog. Those guidelines 
should describe and define the scope of 
the blog. They should also point out is- 
sues that shouldn’t be discussed and 
materials, including company docu- 
ments, that shouldn’t be posted to the 
blog without prior authorization. An 
employer can also have policies or con- 
fidentiality agreements for employees 
who blog on their own, says Karpeles. 

Groove Networks Inc. in Beverly, 
Mass., has such a policy in place, says 


| Jeff Seul, the company’s general counsel. 


Though Groove doesn’t sponsor a cor- 
porate weblog, employees could still 
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discuss company business on personal 
blogs, he says. So he has crafted guide- 
lines for employees to follow if they do. 
Seul says that if a Groove employee 
chooses to talk about the company’s 
technology on a personal blog, that 
employee is advised to post a notice in 
a prominent place making it clear to 
readers that his views don’t necessarily 
represent those of the company. 

Seul also reminds employees not to 
disclose confidential or proprietary 
company information or similar infor- 
mation disclosed to Groove by any third 
parties. He instructs them not to publish 
company documents without autho- 
rization, and he asks bloggers to be re- 
spectful of the company, its employees, 
partners, affiliates and competitors. 


Loose-cannon 
bloggers. Imag- 
ine that your company changes strate- 
gy. There may be a bunch of blogs 
about the previous strategy, but all the 
employees will dutifully update them. 
But what if one of those blogs is from 
someone who is no longer an employ- 
ee and doesn’t want to take it down 
or amend it? “It may be awfully 
hard to cause that to happen,” says 
McKenzie. 
PRECAUTION: Employers should set 
up rules for what happens to the blog of a 
former employee and get all employees to 
accept them. @ 50037 


Big Bloggers 


Some companies sponsor 
corporate blogs. Others 
allow employees to blog 


informally. A smail but growing number of 
U.S. organizations have blogs written by 


their top executives. Here are a few 
corner-office bloggers: 


= Mark Cuban, CEO, Dallas Mavericks 


= Ray Ozzie, CEO, Groove Networks 


= Alan Meckier, CEO, Jupitermedia Corp. 


= Michael Powell, chairman, 


Federal Communications Commission 


= Jonathan Schwartz, chief operating 
officer, Sun Microsystems Inc. 


oe. 


Contrarian View 


Not all companies take this advice to 

heart. Microsoft encourages employ- 
ees to stay connected to customers 
through weblogs, but it doesn’t 


Blog Rules 


® Be origina! 
= Be authentic 
= Have a human voice 





Staying out of legal trouble is 


American Marketing Association, Rich Ottum at 
eStrategyOne and other bloggers will help you 
write a corporate blog worth reading: 


= Post good news fast 

@ Post bad news faster 

@ Stay relevant 

= Use a spell checker 

= Update frequently 

#@ Once you start, don’t stop 
@ Never change your URL 





the online community,” says Micro- 
soft spokesman Adam Sohn. “We get 
important, real-time feedback on our 
products, and customers get greater 
insight to what is going on with key 
technologies inside the company, 
which helps them plan their business 
and continue to be successful.” 
Today, there are more than 1,000 
bloggers at Microsoft, and that num- 





ber keeps growing, Sohn says. But 
there appears to be little effort to 
categorize, control or even counsel 
them. “These [bloggers] are, by and 
large, the domain experts in their 
areas,” he says, “and as a company 
full of people passionate about tech- 
nology, the overall belief is that peo- 
ple will do the right thing.” 


- Linda Rosencrance 
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Drilling Down 
into ROI Numbers 


WHEN IT CONSULTANCY Alinean LLC 


came out with corporate rankings based on its ; 


new IT benchmarking metric, the top compa- 


nies were Fannie Mae and Pioneer Natural Re- : 


sources Co. But Wal-Mart Stores Inc., often 
considered a huge IT success story, was 
nowhere near the top. 

Why? Alinean’s new metric, dubbed ROIT 
(Return on IT), is intended to show IT's rela- 


tionship to shareholder value, as measured by; 


Economic Value Added (EVA), a widely used 
measure of corporate financial performance 
[QuickLink 35920]. Wal-Mart's modest score 
can be explained by looking more deeply into 
the ROIT calculation, says Alinean President 
Bill Johnston. ROIT is calculated by dividing 
the company's EVA by its IT spending, which 


GETTY IMAGES 


Best Bits 


The most useful parts of recent business 

and IT management books 

THE BOOK: Got Game: How the Gamer 

Generation Is Reshaping Business Forever, 
by John C. Beck and 
Mitchell Wade (Harvard 
Business School Press, 


Conventional wisdom 

holds that gamers - 

those who grew up play- 

ing video games - have 
overdeveloped thumbs, underdeveloped minds 
and zero social skills. This book takes a fresh 
look and finds that gamers (now 90 million 
strong) actually have skills that could be quite 
useful in business: bold but measured risk-tak- 
ing, an amazing ability to multitask and unex- 
pected leadership skills. 

But managers from the boomer generation 
will need to adjust to the gamers’ selfish drives 
and play-to-win mentality and tap their instinct 
for heroism, the authors say. Most surprising of 
all, the book says that despite all that time play- 
ing alone, gamers may turn out to be good team 





players. They aren't any more isolated, introvert- 


ed or unsociable than people who take piano 
lessons or play golf. - Mitch Betts 


Things to Ponder 

= A report by the CFO Executive Board, a 
research group in Washington, says chief finan- 
cial officers have wrongly tried to expand their 
influence into realms such as IT and procure- 
ment when they should be sticking to their core 
responsibility of driving corporate financial 
performance. 


= The No. 1 cause of a failed merger or ac- 
quisition is ignoring potential integration chal- 
lenges, says a study by Bain & Co. in New York. 
The No. 2 cause is overestimating synergies. 


@ New York-based Korn/Ferry International 
surveyed 1,951 executives, and 47% of the 
respondents said their companies still don’t 
have procedures in place for dealing with 
an act of terrorism or a catastrophic event. 
And 11% answered “don’t know.” 


= Some disaster recovery plans encourage 
employees to travel to alternate work sites or 


work from home for the sake of business continu- 


: yields an ROIT percentage. Fannie Mae’s 
: ROIT was a whopping 4,248%. Wal-Mart's 
: was 42%. 


It's not that Wal-Mart has lackluster IT in- 


: vestments, Johnston says. Wal-Mart scored 

: lower because, as the biggest company in the 
: world, its revenue growth has slowed and it 

: isn't as profitable as it could be because it 

: passes on its savings to consumers. But “IT 

> is what got Wal-Mart to where it is today,” 

: Johnston says. “It's still an IT success story.” 


ROIT is just a snapshot, he adds. For exam- 


: ple, Lowe’s Companies Inc. currently has a 

* higher ROIT (84%) than rival Home Depot 

: Inc. (62%). But Johnston says Home Depot 

: is making big IT investments to catch up after 
: years of IT neglect, and he predicts that Home 
: Depot will see dividends from those invest- 

: ments and a higher ROIT in the next few years. 


- Mitch Betts 


ity. But the series of hurricanes in Florida shows 
that tactic may not work, says Forrester Research 
Inc. analyst Colin Rankine. “Residential power 
restoration may take days or weeks, while local 
flooding or other infrastructure failures such as 
roads and airlines may affect travel or equipment 
delivery to alternate sites,” he says. @ 50150 
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Hard Times Continue 


Tough times are far from over, say 294 
IT workers who responded to a recent 
survey by Amplitude Research Inc. in 
— Mich. Some key findings: 


) work for companies that have 
~ outsourced IT jobs. 


have not received a raise in 
| over a year. 


say finding a new job would be 
somewhat difficult. 


5 say finding a new job would be 
very difficult or impossible. 
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U.S. IT Staffing Is Up... 


Bra Cae UR URE oe 
2003, according to a survey by the 
National Association of Colleges and 
Employers. This is the first year since 

2001 that 
PX ellis] 
to NACE, information sciences and 
systems grads are earning an average 
salary of bie) 
last year. Computer science gradu- 
ates are making 


dob ete 


This AFL-CIO database lows yout 


ohatetwteds” tek 
www.workingamerica.org/ 
jobtracker/index.cfm 


. . but outsourcing is taking a toll, says 
Andrew Bartels, an analyst at Forrester Re- 
search Inc. Despite the furor over offshore 
outsourcing, the number of U.S. IT jobs 
actually grew in 2003 and will continue to 
grow from 2004 to 2008, he says. But off- 
shore outsourcing is a real phenomenon, and 
it will hold down U.S. IT job growth and sal 
aries at vendor and user companies, he adds 

Forrester projects that IT departments will 
grow 3% annually through 2008. That's an 
improvement from the job cutting of 2001 and 
2002, but the offshore option means that 
companies will hire tewer IT workers than they 
would have in the past. Meanwhile, product 
development jobs at IT vendors, which led the 
revival in hiring in 2003 and 2004, will slump 
in 2006 and 2007 as vendors more aggres- 
sively take advantage of lower-cost offshore 
resources, Bartels says. @9 50067 

- Kathleen Melymuka 
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Companies Plan 
For Growth 


Overall focus of the company . . 
12 months ago: 
26% Primarily growth — 
41% Primarily cost control 
About evenly split 
Not sure 
Today: 
27% Primarily growth 
32% Primarily cost control 
About evenly split —— 
Not sure a 
12 months from now: 
42% Primarily growth — 
18% Primarily cost control 
32% About evenly split 


No! sure———-—-—_-— 


We’re inspired by the human side of data. Digital music and digital photography are 


more than just gigs of data. It's enough head-banging rock to keep a jogger on‘pace. It’s 


giggles and grins for Grandma and Grandpa. That's. why high-capacity Hitachi hard disk 


drives are the industry choice for digital devices, fast runners, and proud parents. From 


the smallest Microdrive’ to the largest SAN solution, Data Storage from Hitachi. 


hitachiyourdata.com 


HITACHI 


Inspire the Next 
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QUICK HITS 


Management 
Attitudes 


is your top management more 
or less confident in the economy 
now than earlier this year? 


is Sarbanes-Oxley having 
an impact on your 
software spending? 


Spending 
more 21% 


eee 
76% 


| 
Spending 
less 3% 


Do you use Linux? 


eeeeoseeeeneeoeeeeece 


Are you likely to standardize 
on Linux for a significant part 
of your computing? 


Is your interest in Linux 
increasing or decreasing overall? 


Increasing 


45% 


BASE: 75 U.S. and 25 European ClOs 
SOURCE: TechStrat survey, Merrill Lynch & Co. 
New York, September 2004 
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at’s the Problem? 


HOSE OF US IN IT tend to see the world 
through the lens of problems and solu- 
tions. Our entire work lives are devoted 
to solving problems. One after the other, 
we knock them down. 
This habit tends to start early in life. In school, 
we are presented with math problems — and we 
solve them. At home, we are given toys to play with — 
and we disassemble and improve them. We are given 
broken computers — and we fix them. We are reward- 


ed for our ingenuity. 

These problems and so- 
lutions bring with them an 
emotional boost, too. What 
can beat the satisfaction of 
solving a truly challenging 
problem? Who doesn’t love 
being the great hero saving 
Aunt Sadie’s precious files 
from oblivion? At the end 
of a particularly thorny 
problem, don’t you just 
imagine yourself spiking 
the code in celebration, as 
if you'd just caught a game- 
winning pass? 

Problems have wonder- 
ful motivating features. 

They are compact and fi- 

nite. They start with a chal- 

lenge — a call to action (or 

at least to thought) — and 

elegant solutions signal triumph. 

We are conquering heroes. We stand 
on Olympus with the gods. We solve 
problems. 

If you need evidence of how promi- 
nent problems are in our thinking, just 
look at the marketing materials for 
almost any software package or con- 
sulting company. They all bill them- 
selves as your “solution” to something: 
“eBragidocious, your customer solu- 
tion.” “JJG Solution Providers.” “iZap, 
your e-mail solution.” Marketing 
people don’t put that stuff in the bro- 
chures by accident. They know exactly 
where our emotional hot buttons are 





and how to push them. 

But for people so at- 
tuned to problems, we 
tend to be remarkably in- 
articulate about them. Very 
smart and accomplished 
people call me all the time, 
and the conversation goes 
something like this: 

“Can you help me?” 
someone asks. 

“T don’t know. What’s the 
problem?” I reply. 

The answer is almost al- 
ways something like, “Our 
management team needs a 
facilitated retreat.” Or, “We 
need a training program on 
communications.” Or, “We 
need a new project man- 
agement process.” 

And then I have a problem. 

Why? Because none of those things 
is a problem. Those are all proposed 
solutions to some unknown or un- 
articulated problem. And I have to 
come up with some polite but probing 
questions to try to understand what’s 
going on. 

Whenever you ask someone, “What’s 
the problem?” and the response is 
phrased as the absence of some solu- 
tion, you can be fairly certain that no 
one really knows what the problem is. 

There are good reasons why this 
happens, none of which is that people 
are stupid or unobservant. The rea- 








sons range from fear to hope. 
FEAR: For most people, problems are 


| uncomfortable things. They are dark, 


mysterious, threatening things. They 


' have ali sorts of unwelcome implica- 


tions: “If I have a problem, there must 


| be something wrong with me.” When 
| we sease a problem, the natural reac- 


tion is to want to do something about 
it, to make it go away. 
But that often leads to making big 


| leaps, skipping thought and going 
| right to action. It’s easy to hop from 


the symptom of the problem right to a 
solution without carefully considering 
the nature of the problem. 

“John didn’t find out about the late 
shipment until it was too late to do 
anything about it, therefore we need to 
send our managers to communication 
training.” Or, “Sandy, that newly pro- 
moted manager, said some really hate- 
ful and unproductive things to her 
staff at that last meeting, so we'd bet- 
ter get her some coaching.” 

HOPE: At the other end of the spec- 
trum are imagined realities, vague 
Utopian musings of a better future. 
These can be driven by truly extra- 
ordinary visionary ideas about trans- 
formations of organizations and strate- 
gies. Sadly, they are too often the re- 
sult of a brilliantly conceived market- 
ing program for some sort of minor 
technical gewgaw foisted on over- 
whelmed managers. 

As experts in problem solving, our 
responsibility is to recognize and ex- 
pose this sort of fuzzy thinking. As 
service providers, we help our cus- 
tomers best when we ensure that we 
are solving real problems rather than 
filling orders. As leaders, we must re- 
member that work has the most mean- 
ing when all concerned know toward 
what end we strive. Absent solutions 
are never problems, and as an indus- 
try, we must stop acting as if they 
were. @ 50051 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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IT Careers: Does this Employer Value Diversity? 


ompanies covet a reputation for valuing diversity. They 
ear they talk, they count. But for those IT 
professionals defined as “diverse”, how do you know 
for sure? 


It's a question that Annette Merritt Cummings and Martha 
Ceja spend their careers evaluating. Cummings is vice 
president/national director of Diversity Services for Bernard 
Hodes Group. Ceja is a strategist with the group, based in 
Silicon Valley. 


The Diversity Services organization looks at valuing 
diversity as a process of moving from an initial point 
through four phases that end with inclusion. Cummings 
defines inclusion as acceptance of the ideas and talents 
that all people bring to an organization, a long journey 
from initial training that helps an organization understand 


why diversity matters from a business stance. 


Cummings says there are specific queues as to the progress 
along that continuum. “The first place you'd go in looking 
at a company is probably to its website. Do they have 
affinity groups? Is the site in more than one language, such 
as Chinese, Spanish or other? How many clicks does it take 
you to get to some mention of diversity? If it takes six or 
seven before there's any mention, that tells you this is not 
one of the company’s higher priorities or that the human 
resources or diversity organizations has lost the battle for 


(website) real estate.” 


Ceja says appearances do count, on the website and in real 
life. “Are there individuals (of diverse backgrounds) in 
positions of leadership?” she asks. “Seeing this (for any 
person of diversity) is invigorating in terms of the 
possibilities it represents. | advise people to drill up further 
— look at the executive committee and at the board of 
directors. Look for transparency in terms of how open the 
organization is about its progress in valuing diversity. Is it 
something they report on annually?” 


In addition, the two diversity leaders have advice for IT 
professionals looking at a career change. “If | were looking 
at new opportunities, | would look first at an industry that 
fascinates me, beyond the IT application, because that's 
where the jobs are — not in pure IT companies," says Cummings. 
The industries closest to the consumer, such as automotive 
and consumer products, are marketers by definition and 
understand the changes in the marketplace in this country. 
They have embraced diversity at a more aggressive rate.” 


Cummings also points to government agencies as major 
players in the future of the IT profession. Agencies ranging 
from the CIA to the Office of Personnel Management are 
hungry for IT skills; up to 70% of the senior managers 
in federal government are expected to retire in the 
next five years. “These aren't just entry level jobs — these 
are careers.” 


Ceja says for IT professionals there is a distinct advantage 
— skills mean everything. “In Silicon Valley, if you have the 
skills, this becomes a color-blind profession in some ways, 
“these are careers," she says. 





“DIVERSITY IN PRODUCTS, 
SERVICES AND PEOPLE" 


THE SOCIAL SECURITY ADMINISTRATION IN WOODLAWN, 
MARYLAND is seeking highly motivated IT Professionals for the following 
types of positions: Mainframe Developers (COBOL, CICS); Internet 
Developers (Java, WebSphere, CGI); Database Administrators (DB2, IDMS. 
Oracle); Systems Operation Analysts (SUN/UNIX, JCL, TSO/ISPF, z/OS 
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COME JOIN OUR WINNING TEAM! - WE OFFER: 
COMPETITIVE SALARIES — RANGE: $52,963-$85,867; A COMPRE- 
HENSIVE BENEFITS PACKAGE, INCLUDING: RETIREMENT SAVINGS 


INVESTMENT PLAN; HEALTH. 


LIFE AND LONG TERM INSURANCE 


FOR SELF AND FAMILY; PAID VACATION, SICK LEAVE AND 10 PAID 
HOLIDAYS; PAID OVERTIME AND ONGOING TECHNICAL TRAINING 
AND FLEXIBLE WORK SCHEDULES. ALL OF THIS AND A POSITIVE, 


CASUAL WORK ENVIRONMENT! 


To apply go to USAJOBS at: http/jobsearch.usajobs.opm.gov/_ and select 
the Social Security Administration. Must be a United States citizen to apply. 


FT Project Manager. Multiple 
positions. Responsibilities in- 
clude: Manage the design, de- 
velopment and implementation 
of multi-tier client/server, MQ 
Series based systems, ADABAS 
/NATURAL based _ systems, 
CICS and VSAM based sys- 
tems, multi-user, re-engineering 
applications for finance compa- 
nies utilizing Legacy Mainframe 
Finance Applications, and de- 
sign tools including C, C++, 
NATURAL/ADABAS and MQ 
Series; manage user accep- 
tance tests and user training; 
and manage systems analysts 
and other professional support 
personnel. Must be willing to 
travel to client sites Monday- 
Friday. Must have a Master's 
Degree or foreign or educational 
equivalent in Computer Science, 
Engineering or a related field 
and three years of experience} 
as a Systems Analyst or in a re- 
lated occupation, or a Bachelor's: 
Degree or foreign or educational 
equivalent in Computer Science, 
Engineering or a related field 
and five years of experience as 
a Systems Analyst or in a relat- 
ed occupation. If interested, sub- 
mit resume in duplicate to 


Ms. Sandy Pruitt 
NUIT 
1050 Crown Pointe Parkway, 
Suite 500 
Atlanta, GA 30338 


FT Project Manager. Multiple po- 
sitions. Responsibilities include: 
Manage the design, develop- 
ment and implementation of 
multi-tier client/server, multi- 
user, re-engineering applica- 
tions for insurance companies 
utilizing Legacy Mainframe In- 


One System, and design tools 
including SCLM, TWS, ZEKE, 
ENDEVOR, EOS, DADS, SAV- 
RS, SAR, APC, PanApt, Comp- 
areX, QMF, Dispatch and RDS; 
manage user acceptance tests 
and user training; manage sys- 
tems analysts and other profes- 
sional support personnel. Must 
be willing to travel to client sites 


educational equivalent in Com- 
puter Science, Computer Infor- 
mation Systems, Engineering or 
a related field and three years of! 
experience as a Systems Analy- 
st or in a related occupation, or a 
Bachelor's Degree or foreign or 
educational equivalent in Com- 
puter Science, Computer Infor- 
mation Systems, Engineering or! 
a related field and five years of 
experience as a Systems Analy- 
st or in a related occupation. If 
interested, submit resume in 
duplicate to: Ms. Sandy Pruitt, 
N 1 1 T, 1050 Crown Pointe 
Parkway, Suite 500, Atlanta, GA| 
30338 
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SENIOR APPLICATIONS PRO- 
GRAMMER-ANALYST (FINAN- 
CE DEPARTMENT): Duties in- 
clude: Under general direction, 
the Senior Application Program- 
mer/Analyst formulates and de- 
fines systems scope and objec- 
tives in order to design, develop 
or modify information systems 
Assists Project Leader in the 
development of detailed system 
specifications for major system 
installations. Performs feasibility 
Studies to analyze cost/benefit 
trade-off of systems solutions 
Initiates systems design specifi- 
cations, and prepares flow 
charts, block diagrams and re- 
port layouts using current design 
techniques or functional pro- 
gram specifications. Codes pro- 
grams, generates program test; 
data, tests and debugs pro- 
grams. Provides and maintains 
program and system documen- 
tation. Provides technical guid- 
ance to less experienced Pro- 
grammers. Working knowledge 
of all processes involved in sys- 
tems analysis and programming, 
including design factors, hard- 
ware and software require- 
ments, system facilities, and job 
control procedures required 

Min. Reqt's: BS/BA (foreign 
equivalent accepted) in EE, CS, 
IT, Math or related field of stud) 

PLUS 2 yrs exp. in the job of- 
fered or related exp. in program- 
ming and or systems analysis. 
ALSO: Must also possess dem- 
onstrated experience and profi- 
ciency: (1) with the development! 
and implementation of at least’ 
one major distributed system in- 
Stallation including maintenance 
and modification; (2) program- 
ming and systems development 
using: Visual C++, VB, Power- 
Builder, Sybase, Oracle & MS 
SQL Server and Access SW da- 
tabases; and (3) must possess 
strong background in mathemat- 
ics to develop and support actu- 
arial applications. Basic pay 
range is $56,000 - $68,000 per 
year FT and standard company 
benefits. EEO. Submit 2 resum- 
es and respond to Case No 
2003-00395, Division of Career 
Services, Labor Certification 
Unit, 19 Staniford Street, 1st Fi., 
Boston, MA 02114 
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Senior Account Manager wanted 
to source and support new tech- 
nical business development 
opportunities Must have 
Bacheior’s degree in Electrical 
Engineering, Computer Science 
or related field and 4 years 
experience in corporate sales in 
the software services industry, 
including 2 years experience 
with project management and 
software development. Send 
resume to Hilary Gosselin 
Human Resources Manager. 
Lionbridge Technologies, Inc 
492 Old Connecticut Path 
Framingham, MA 01701 


Programmer Analyst w/2 yrs 
exp to implement, test & de- 
ploy applications on Windows 
& Linux platforms using Visu- 
al Basic, Visual C++ and 
Scripting. Write & test code 
for Oracle, Mysqi & Access 
databases using Oracle 
PL/SQL, Access & SQL. Use 
HTML, JavaScript, Java, 
ASP, PHP, C, MVS/TSO plat- 
form, FORTRAN, PL/I, SAS 
& JCL. Mail res: Optima 
Technology Partners, Inc 
264 South River Rd, Ste 454 
Bedford, NH 03110. 


Programmer Analysts to ana- 
lyze, design s/w appls using 
SAP R/3, ABAP/4, C, C++, 
Java, VB, JSP, JScript, HTML 
on UNIX/Windows os; gath- 
er/document reqs from user 
community; test/troubleshoot 
project appi code according to 
system objectives. Require a 
B.S. or foreign equiv in CS/ 
Engg (any branch)with 2 yrs 
exp in IT. Competitive salary. 
F/T. Travel involved. Resume 
to HR, Smartsoft Internation- 
al, Inc., 3965 Johns Creek 
Court, Ste 500, Suwanee, GA 
30024 
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Seeking qualified Software En- 
gineers and Programmer An- 
alysts with experience in any of 
the following tools and technolo- 
gies: CCNP, CCNA, MCP, Cisco 
Pix, Local Directors, Aironet 
Access points, Checkpoint fire- 
wall, Packet Shapers, Nortel 
Contivity VPN Switcnes, Cisco 
Network Registrar server, RSA 
Ace Server, Websense URL fil- 
tering, Cisco Works, Whatsup. 
Packet Sniffer, Snort IDS 
Insight Manager, CTX 670 
Reqmts: BS or MS degree w/ 2 
or 3 yr. exp. in the field. Apply to 
Kaltech International Corpora- 
tion, 3965 Stone Village Ct 
Duluth, GA 30097 EOE 


Project Managers to lead/man- 
age teams to study, analyze 
customize and develop Portal 
infranet billing appls using C 
Pro-C, Oracle procedures, trig- 
gers, Unix shell scripts etc; lead 
teams to develop custom GUI 
tools in VB using portal COM 
objects; mentor in development 
of Oracle triggers, packages 
procedures, view and pro-C for 
data retrieval/data migration 
evaluate, test, train team mem- 
bers. Require MS (or foreign 
equiv) in CS/Computer Engg & 1 
yr exp in portal infranet billing 
F/T. Competitive salary. Travel 
involved. Resumes to HR 
Intercall, Inc., 1211 O.G. Skinner 
Drive, West Point, GA31833 
Please refer Job 1C11104 


Maxil Technology Solutions, a 
computer consulting company, 
has openings available for Pro- 
grammer Analysts. Duties will 
include but not be limited to 
modifying, developing and 
testing computer programs 
and evaluating user requests 
for new/modified programs. A 
degree is required. Will accept 
foreign equivalent of the re- 
quired educ. and/or its equiv. in 
educ. and experience. Send 
resumes to HR Dept., Maxil 
Technology Solutions, 2625 
Butterfield, Suite 316 W. 
Oakbrook, IL 60523 
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NET MATRIX SOLUTIONS 


Net matrix Soiutions has the fol- 
lowing positions open 


SOFTWARE ENGINEERS: to 
research, design, develop com- 
puter software systems and lead 
new product development pro- 
jects to timely completion. Abil- 
ity to evaluate and design SAP 
software is required. Needs a 
Masters in CS/MIS or any relat- 
ed degree combined with 1 + 
years experienc: Bachelors 
with 5 years experience in de- 
signing and developing comput- 
er software systems. 


SYSTEMS ANALYSTS: to ana- 
lyze, design and develop opera- 
tional procedures to automate 
processing and to develop new 
systems to improve production 
Knowledge of SAP, Oracle, and 
other business related 

is essential. Needs Bac! 
Engineering/CS or in any 

field combined with 5 years 

vant experience in designing 
and developing computer soft- 
ware systems 


Please send resumes to the re- 
spective addre: Ss: Human Re- 
sources, 480 Congress Street 
1st floor, Suite #317, Portland. 
ME 04101 


CPG, Inc a fast Growing soft 
ware firm is looking for Program- 
mer Analysts: Should have 
bachelor’s degree in computer 
science/related field with 2 years 
experience in any two of the fol- 
lowing skills: Design and devel- 
opment of software applications 
Java, J2EE, EJB, XML, Struts 
VB, .NET, C#, C++, ASP, Sur- 
pass, Siebel, peopleSoft, SAS 
EDi, Cobol, SunSolaris, Web 
services, WMQIi, MQSeries 
SAP, ABAP, DB2, MS-SQL 
Oracle, SQLPlus*, 0S/390, Unix 
WebLogic, Tuxedo. 


We accept foreign education 
equivalent of the degree, or the 
degree equivalent in education 
and experience 


Send resume and covering letter 
to: CPG, inc. 250 Regency 
Court. Suite #101, Brookfield 
WI! 53045. 


COMPUTER SYSTEMS 
ENGINEER: MEDICAL 
SYSTEMS INTEGRATION 


Designs, develops and main- 
tains computer systems to 
import data from multiple plat- 
forms/sources, and to manage 
data within private wide area 
network. Must have B.S. in 
Electrical Engineering, Comp- 
uter Science or equivalent, and 
at least two years experience in 
the job offered. 50+ hours per 
week. EOE, Drug Free Work- 
place. Send resume to: 21st 
Century Oncology Attn: Joyce 
White, 2234 Colonial Bivd., Ft 
Myers, FL 33907 or fax 
(239)931-7381 


Programmer Analysts/Software 
Enggs. needed. Seeking qual 
candidates possessing MS or 
equiv. &/or rel. work exp. Part of 
req. rel. work exp. must include 
2 yrs working w/ Visual Source 
Safe & MS SQL Server & 3 yrs. 
working w/ Visual Basic. Exp 
may be simultaneous. Duties 
include design software, data- 
bases & analyze reqs. & busi- 
ness processes. Work w/ MS 
SQL Server, Visual Basic, Visual 
Source Safe, DataDynamics 
Active Reports, & ODBC on 
Windows. Fwd. resume, ref. & 
salary req. to ECMD, Inc., Attn: 
HR, 2 Grandview St, PO Box 
130, N. Wilkesboro, NC 28659. 
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Software Engineers (hvng Masts 
Deg w/2yr exp or Bach Deg w/5 
yrs exp), & Progmr Analysts w/ 
exp. for IT Co., Exp. must inci 
comb's of Java, Custom Portal 
implementation using Java/ 
J2EE Technologies, Business 
process re-engineering, ATG 
architect/manager for custom 
J2EE based personalization 
websites/portals, EJB, Serviets. 
JSP, C++, C, Net, C#, COM 
DCOM, MQSeries, MQS!, Web 
methods, TIBCO, Seebeyond 
EDI, Gentran, Harbinger, TLE 
Oracle Clinical, SAS Program- 
ming, Cardiff, Smalltalk, Report- 
ing services, .Net, ASP.NET, 
VB.NET, C#, ADO.NET, Web 
Services, Remoting, Dataware- 
housing, Business Objects, In- 
formatica, Microstrategy, Actu- 
ate, Siebel, Informix, Sybase 
Oracle, SQLServer, DB2, MS- 
Access, Unix, Windows 2000/ 
XP/2003, Netscape Application 
Server, SAP Basis for SAP R/3 
& MySAP Components, BEA 
Web Logic; Cognos ReportNet 
on IBM Websphere. We are also 
looking for Networking Consult- 
ants with exp in global office 
connectivity, branch connectivity 
using BGP routing protocol, de- 
sign,develop, test & implement 
network solutions. Must have 
relevant exp. Reply w/ 2 copies 
of res 
HRD 
Objectsoft Global Services Inc. 
650 Main Street, Suite #211 
South Portland, ME-04106 
Fax: 207-253-5407 
Email 
resumes@obdjectsoftgiobal.com 


Programmer/Analyst needed for 
Software Development, Servic- 
es & BPO firm located in Burlin- 
gton, VT. Job duties include: An- 
alyze, design, and develop com 
puter applications and docu- 
ments for various clients using 
UML methodologies and design 
patterns. Develop software us- 
ing ADO.NET, ODP.NET, COM 
and ATL. Model databases using 
Visio Architect. Develop compli- 
cated queries and stored proce- 
dures on multiple databases 
Applicant must have B.S. de- 
gree in computer science, engi- 
neering, math, or business. Ap- 
plicant must also have 1 yr. exp 
in the job duties listed above or 
in any computer related occupa: 
tion which must include the skills 
listed above. 40hrs/wk, 8:00am- 
5:00pm, Mon-Fri, $60,000/yr. 
Send resumes to: Job No 
29314, P.O. Box 488, Montpel- 
ier, VT 05601-0488 


Programmer/Analyst needed for 
Software Development, Servic- 
es & BPO firm located in Burlin- 
gton, VT. Job duties include 
Analyze, design, develop, and 
implement client server based 
computer applications for cli- 
ents. Use .NET framework 
VC#.NET, VC++, STL, and 
COM/ DCOM. Perform work in 
a Windows environment. Appli- 
cant must have B.S. degree in 
computer science, engineering, 
math, or business. Applicant 
must also have 1 yr. exp. in the 
job duties listed above or in any 
computer related occupation 
which must include the skilis 
listed above. 40hrs/wk, 8:00am- 
5:00pm, Mon-Fri, $60,000/yr. 
Send resumes to Job No 
29312, P.O. Box 488, Mont- 
pelier, VT 05601-0488 


Programmer-Analyst needed 
to analyze specs, create 
schema, write code using 
Corba & test applics using 
C++/C, Java, SNMP, NMS. 
HP-UX 
servers Linux, 
Oracle, DB2, GNU, TCP-IP, 
Socket & Profiler, OOAD 
Global 
Consultants, Attn: Hireme, 
8800 Grand Oaks Cir., #100, 
Tampa, FL 33637 
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Finding Cures. 
Saving Children. 


Uniting Employees. 


Current Opportunities: 


Systems Quality and 


Compliance Test Engineer I 
Clinical Research Informatics (Job Number 09265) 


Systems Quality and 


Compliance Administrator I 
Clinical Research Informatics (Job Number 08756) 


Bioinformatics Associate 


Research Scientist 


Hartwell Center for Bioinformatics and 
Biotechnology (Job Number 09977) 


positions, please log on to 


www.stjude.org/jobs 
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Structure capacity models, and to co-ordinate the deploym 
agement of mission-critical load-balanced, highly available, and redun. 


dant server configurations to support global operatic 


Additionally 


required is the demonstrated ability to translate logical data models into 
physical SQL Server and Oracle database schemas. Further required is 


the demonstrated ability to ¢ 


ide technical support to system and data- 


base adminisirators in tuning, optimization, backup, recovery and moni- 
toring of mission-critical e-business systerns. Finally required is the 
demonstrated ability to conduct new technology evaluations and provide 
project and resource cost estimations to senior financial management for 
capital budgeting and internal rate of return (IRR) analysis of recom- 
mended hardware and software solutions. Starting base salary is $93,000 
per year, together with ten (10) days paid vacation, contributory medical 
and life insurances, and other industry-competitive benefits. Qualified 
applicants respond with two (2) copies of resume only to: Case 
#200300358, Labor Exchange Office, 19 Staniford Street, 1st Floor 


Boston, MA 02114. An EOE/MFHV. 


Senior Enterprise Infrastructure 
Engineer wanted to participate 
in arch. designs for the planning, 
integration & development of 
J2EE applications. Must have 
Master's deg. in Comp. Sci. or 
Eng. & 2 yrs. software develop- 
ment & object oriented analysis 
& design exper., incl. commer- 
cial software eng. exper. in EJ 

SOAP, Weblogic & WSAD. 
exper. in Content Mngmnt. or 
Digital Asset Mngmnt. Systems. 
& exper. in a tech. leadership 
role, responsibie for design & 
deveiopment of core functional 
modules of J2EE based applica- 
tion. (A Bach. deg. & 5 yrs 
exper. can substitute for a 
Master's & 2 yrs. exper.) Send 
resume to Human Resources 
Job Code SE89, Context Media 
Inc., 1 Providence Washington 
Plaza, Providence, Ri 02903. 
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Systems Analyst needed for 
Software Development, Servic- 
es & BPO firm located in Burlin- 
gton, VT. Job duties include: As- 
sess performance and scalabili- 
ity of client company's Siebel 
Customer Relationship Manage- 
ment (CRM System) product for 
the purpose of improving perfor- 
mance. Build scripts using Load 
Runner to assess and applica- 
tions performance for large 
enterprise software systems 
Prepare documentation and 
make recommendation to the 
client regarding hardware and 
third party software usage. Work 
in both UNIX and Windows envi- 
ronments. Applicant must have 
B.S. degree in computer sci 
ence, engineering, math, or bus- 
iness. Applicant must also have 
2 yrs. exp. in the job duties listed 
above or in any computer reiat- 
ed occupation which must in- 
clude the skills listed above 
40hrs/wk, 5:00am-5:00pm, Mon- 
Fri, $60,000/yr. Send resumes 
to: Job No. 29208, P.O. Box 488 
Montpelier, VT 05601-0488 





SYSTEMS ENGINEER 
TEAM LEAD 


Manage system engineers and 
computer application developers 
and other personnel to coordi- 
nate the design, development 
implementation and testing, of 
high volume transactional tele- 
phonic and web based business 
applications and database sys- 
tems for the commercial and 
government sectors containing 
highly confidential personal in- 
formation, government verifiable 
audit controls and interactive 
voice response, Manage profes- 
sional staff to resolve problems 
design and document useability 
testing and ensure system func- 
tionality and performance. Re- 
quires Bachelors or equivalent 
level degree in Computer Sci- 
ence, MIS, Statistics, Engineer- 
ing or closely related field and 
four years experience in the 
leadership/management of com- 
puter applications development 
projects. Qualified applicants 
must presently be eligible for 
permanent employment in the 
United States. (8:00 a.m. to 5:00 
p.m.); 40 hours per week, over- 
time as needed without addition- 
al compensation. Position is with 
TALX Corporation in St. Louis, 
Missouri. Send resumes to: Ms 
Ellen Stanko, Director of Human 
Resources, TALX Corporation, 
1850 Borman Court, St. Louis. 
Missouri 63146. EOE 


Seeking qualified applicants for 
the following positions in Mem- 
phis, TN: Senior Programmer 
Analyst. Formulate/define func- 
tional requirements and docu- 
mentation based on accepted 
user criteria. Requirements: Ba- 
chelor's degree* or equivalent in 
computer science, MIS, engi- 
neering or related field plus 5 
years of experience in sys- 
tems/applications development 
Experience with J2EE, Oracle 
databases and airline schedul- 
ing systems also required 
*Master's degree in appropriate 
field will offset 2 years of gener- 
al experience. Submit resumes 
to Matt Coplas, FedEx Corpor- 
ate Services, 2955 Republican 
Drive, 2nd Floor. Memphis, TN 
38118. EOE M/F/D/V. 


EdgeTech Services, Inc. 
is seeking GIS Appli- 
cations Developer. GIS 
& Remote Sensing ex- 
perienced individuals w/ 
BS in Computer Sci- 
ence please respond 
with resume to: 141 
Peaked Mountain Road, 
Townshend, VT 05353 
Attn: Ms. Hunt. 


System Development Analyst 
wanted to design and develop 
system software for law enforce- 
ment agencies with emphasis 
on systems tools, communica- 
tions programming, and applica- 
tion programming using VB, VC, 
C++ & related language or sys- 
tems and SQL Server Database 
Administration. Bachelor degree 
in Computer Science & 2 years 
of experience required. Send 
resume to Law Enforcement 
Support Agency, 955 Tacoma 
Ave. S., Suite 101, Tacoma, WA 
98402 


IT|Careers 


Computer Professionals (Mult- 
iple Openings) Software Engin- 
eer/Programmer Analyst/Syst- 
ems Analyst/Database Admini- 
strator/ Network Administrator. 
Requirements include US 
equivalent to a Bachelor or 
Master Degree; in lieu of a 
Master's Degree, we are willing 
to accept a Bachelor Degree 
with five (5) years of prior pro- 
gressive professional experi- 
ence. Must also have experi- 
ence in some of the following 
skills: C/C++, Java, Cold Fusion, 
Microsoft Technologies (Visual 
Basic, NET, ASP) CRM (Siebel, 
Clarify, Vantive), Middleware 
Technologies (ORBIX, TIBCO, 
CORBA, VITRIA), Dataware 
Housing Tools (informatica, 
DataStage, Abinitio, Business 
Objects, Cognos, Micro Stra- 
tegy, Brio) ERP (SAP, People 
Soft, Oracle Apps, Baan) 
Mainframe (COBOL, CICS, JCL, 
VSAM), AS400, Ecommerce, 
Databases (SQL Server, Oracle 
DB2, Sybase), Windows (95/ 
98/2000/NT/XP, Exchange), 
UNIX (Sun Solaris/HP), Linux: 
and QA (Win runner, Load run- 
ner, SILK, Quick Pro, Rational 
Tools, Manual Testing). Exten- 
sive Travel and/or relocation 
Attractive compensation pack- 
age. Mail resume to: Human 
Resource Director, Reasonsoft, 
inc., 74 State Road, Ste. 203, 
Kittery, ME 03904 


Software Engineers, Program- 
mer Analysts, Systems Analysts, 
need for VA basedIT firm. Will 
need Bach +1 yr exp for Jr. Lev- 
el positions and Masters +1 yror 
Bach + 5 yrs of exp for Sr. Level 
position. Various skills req: Sta- 
tistical software(SAS), PERL 
ERWIN, C, C++, VC++, iplanet, 
ASP, DHTML, Javascript, Syb- 
ase, Oracle, SQLServer, Busin- 
ess Objects, Crystal Reports 
Windows NT, lINUX, IIS, UN- 
IX, Sun Solaris, CISCO, PL/ 
SQL, Cognos, Brio, Netscape: 
enterprises server,Cold fusion, 
data modelling, informatica, e- 
business intelligence, cics, db2, 
peoplesoft, jdedwards, power 
builder, CRM, VB, j2ee, jsp, 
Jdbc, ejb, web sphere, weblog- 
ic,Apply with 2 copies of resume 
to H.R.Dept, Ling Technologies 
2325, Dulles Corner Bivd, Suite 
500 Herndon, Va - 20155. 


Programmer Analysts for 
Naperville, IL. Design & Develop 
software applications using 
Oracie, Erwin, XML, UML, C++, 
Interwoven, Coolgen, Ciear- 
Case, ClearQuest, PVCS, UNIX; 
Bachelors or Equivalent req'd in 
Computers, Engineering, Math 
or any related field of study + 2 
yrs of related exp. 40 hrs/wk. 
Must have proof of legal author- 
ity to work permanently in the 
U.S. Send resume to HR 
Manager, Redsalsa_ Techn- 
ologies, Inc.,184 Shuman Bivd, 
Suite#180, Naperville IL 60563. 


SAP Business Systems Analyst 
Thomson, Inc. is seeking an SAP 
Business Systems Analyst to 
consult with clients regarding 
SAP software systems, provide 
SAP analysis, redesign, and con- 
figuration of clients’ business 
procedures, policies, and pro- 
cesses, and act as liaison be- 
tween the application developers 
and the business community to 
define business and system 
requirements. Must have 4 years 
of experience in SAP consulting 
and configuration. Send cover; 
letter and resume to: Betty 
Moreno-Silva, Manager, Human 
Resources, Thomson, Inc., 3233 
East Mission Oaks Boulevard, 
Camarillo, CA 93012. Please ref- 
erence Job #AMM in your cover: 
letter. 


Unix Administrator required to 
install, configure, update and 
maintain UNIX (primarily Sun 
Solaris) servers in a Windows 
environment, troubleshooting 
system problems and failures. 
Determine and implement the 
requirements for hardware and 
software and perform related 
duties. Bachelor in Computer 
Science and two year related 
experience required Send 
resume to HR (IT01), Memphis 
Managed Care Corp., 1407 
Union Ave., Suite 200, Memphis, 
TN 38104 


IndusRAD seeks engineers & IT 
staff to design & develop appli- 
cation software for Marine en- 
gines & advanced diesel engine 
using ANSI C program. Write 
test plan & procedures. Must 
have MS/BS with exp. Good 
wage with benefits. Please send 
resume to info@indusrad.com 
EOE 


Ultimed HMO seeks system 
analyst to develop functional/ 
system specifications using ob- 
ject oriented design & CASE 
tools, program in VB, VC++ 
Visual FoxPro, develop ad-hoc 
reports and queries. Applicants 
must have BS/MS with IT exp. 
Please contact lactchson@ 
ultimed-hmo.com. EOE 


Software Engineer, Appli- 
cations. BS in c. sci, eng or 
rel. field; 3 yrs exp. to 
include Visual Basic, .NET, 
SQL, Crystal or T-SQL 
reporting, Rational Rose, 
Java, C++, UNIX; demon- 
strated communication, 
mentoring & documenta- 
tion ability; exp. w/financial 
reports & concepts. Send 
resume to Joanie Bond, 
$001 Hickman Rd., Ste 
340, Urbandale, IA 50322. 
EOE. 


Sr. Applications Programmer’ 
w/2 yrs exp in using SE| CMM 
quality control standards, full 
life cycle expertise in ADR 
securities, cross-product pro- 
cessing, Power Builder with 
PFC, Sybase ASE, Oracle, 
SQL Anywhere, Visual Basic, 
Crystal Reports, Actuate, 
Unix, Java, web component 
development, Erwin, Visual 
Source Safe, Clearcase, Net- 
scape Enterprise Server. Mail 
Res to: Open Systems Tech- 
nologies, Inc. 8 Winter Street, 
6th Floor, Boston, MA 02108. 


Programmers (Level-3): Deve- 
lop & write computer programs 
for web/client-server software 
apps. & convert project specs. in 
JD Edwards One World, 
Microsoft tech., Oracle and 
Java/J2EE. BS in Comp. Sc., or 
rel. field & 2 yrs. software devel- 
opment exp. including at least 
12 months exp. in job offered 
required. $50,200/Yr. & benefits. 
Mail resume to Jann Nielsen, 
Melaleuca, inc., 3910 S 
Yellowstone Hwy., Idaho Falls, 
ID 83402. No phone calls 
please. EOE 


Lae bacto usmereyenl 


Sr. Software Engineer. 
Customize & integrate s/w 
components from 3rd party 
vendors into wireless prod- 
ucts. Bach's deg in Comp 
Sci, Physics & Elec Engrg 
reqd + 5 yrs prog exp in 
specialty field. Snd resume 
to PMCDU, 1225 North- 
brook Pkwy, Suwanee, GA 
30024, Attn: D. Greer, RK 


Web-Database Administrator/ 
Programmer Analyst. Seeking 
quailified candidates possessing 
B.S. or equivalent with related 
work experience of 3 to 5 years 
M-F 8am-5pm. Duties: Internet 
development, design, develop 
and implement, e-commerce 
application using COM, COM+, 
MTS, IS, HTML, DHMTL, Java 
Script, Microsoft and Sun Tech- 
nologies with database Oracle: 
8.1 & MS SQL Server 2000 and 
MS-Access 2000. Please send 
resume to Angel Diamond Jew- 
elers Company, Attn: Mr.Yaqim 
Lalani, 4800 Texoma Pkwy, Ste 
202, Sherman Tx 75090. Email 
y_lalani@hotmail.com. 


Software Developer 


Analyze, design and deploy’ 
customized IT applications for| 
the mortgage and finance in- 
dustry. Must have Bachelors 
Degree or Foreign Equiv. in CS 
or Eng. or in a related field & 2 
yrs. exp. or 2yrs. exp. in a relat- 
ed position w/ability to use: C#, 
VB.Net, VB, ADO.Net and 
ASP.Net 40.0 hrs./wk 8:00 AM - 
6:00 PM. Applicants send 
cover letter and resume to: 
Cyber Korp, Inc.,400 West 
Lake Street, Suite 216, Roselle 
IL 60172-3572, Attn: HR MGR. 


Programmer Analysts to ana- 
lyze, design, s/w applis using 
Java, ASP, Serviets, JDBC, 
HTML, Oracle, PL/SQL, Dev 
2000, Forms, Reports Win- 
dows OS; design web pages 
dynamically using JavaScript; 
design database structure using 
UML; provide on site mainte- 
nance support, debug, modify, 
fine tune and perform code opti- 
mization. Require: BS or For- 
eign equiv with concentration in 
CS/Science/Engg (any branch) 
with 2 yrs exp in IT. Competitive: 
salary, F/T positions 
involved. Resume to 
Technologies, inc. 2400 86th st, 
Ste12, Urbandale, 1A 50322. Job’ 
ID IORPA1104 


Software Developer 


Developing and programming 
large scale electronic messag- 
ing system for markets in China 
and other eastern countries, 
researching the proper technolo- 
gies to enhance the develop- 
ment process, and providing 
prototypes for each program to 
be coded in Java/NetBeans, 
C/C++, JavaScript, etc. Req. MS 
degree in CS or a related field 
and proficiency in Java/Net- 
Beans, C/C++, JavaScript, and 
XML. Ability to understand writ- 
ten Chinese or other eastern 
Asian languages also required. 
40 hrs/wk. Fax resume to 
Send2Fax, LLC. at (843) 645- 
9501 or email hr@send2fax 
com 


ProQuest, one of largest infor- 
mation aggregators, has multi- 
ple openings for Software Engin- 
eers, System/Programmer An- 
alysts, DBA. Candidates must 
have MS/BS with experience. 
We offer attractive wage with full 
benefits. Please send resumes 
to: human_resources@il.proquest 
com EOE 


System Analyst & IT staff want- 
ed by Credit Acceptance Corp 
Design & develop ETL process 
to upload data from OLTP sys- 
tem to Star Schema; develop 
interface process to transfer 
data between Loan Servicing & 
FACS; use Oracle, SQL Server, 
Crystal Reports. Please contact 
hr@creditacceptance.com 


Want a new 
IT career? 
Check out our jobs 


in the combined 
CareerJournal.com 


database. 
www.itcareers.com 
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IT CAREER OPPORTUNITIES 


CALIFORNIA - (Corporate HQ. 
Employment is throughout US) 
Programmer Analyst 

Sr. Computer Scientist 
Systems Analyst 


MICHIGAN 
Programmer Analyst 


NORTH CAROLINA 
Database Specialist 


Positions require a BS and rele- 
vant experience; a combination 
of experience and college level 
education may be accepted. The 
flexibility to travel and be on-call 
may be necessary. Proof of legal 
authorization to work in the U.S 
is required. Please forward your! 
resume to Computer Sciences 
Corp., Attn: J. Le, 2100 E. Grand 
Ave., Mail Code A209, El 
Segundo, CA 90245. Please 
indicate the specific occupation 
and location for which you are 
applying 


SAP Business Intelligence 
company seeks experi- 
enced SAP functional/tech- 
nical consultants familiar 
with generic and custom 
extractors, data modeling, 
info sources and info cubes. 
Also seeking SEM, CRM 
and SCM/APO experience 
Placements throughout US 
Please email resume to 
recruiting@ bisamerica. com or 
fax to 305-675-0686 


Seeking qualified candidates 
for Sr. & mid-level IT profes- 
sional positions including 
Programmer Analysts, Data- 
base Administrators, Software 
Engineers, IT/Software and 
similar type positions. Candi- 
dates must possess MS/BS or 
equivalent and/or related 
work experience. Please mail 
resume and references to: 
Patel Consultants Corp. 
Attn: HR 
1525 Morris Ave. 
Union, NJ 07083 for 


SW Engin'rs: Rsrch, design 
& test RDBMS, CRM, Web/ 
Data Warehouse Info mgt sw 
appl’n w/ JDK, Cobol, Vign- 
ette, Oracle, Sql Server. 
Toad, Dev'ipr Suite, Avaya 
Lucent, CTI, Egain, .net, 
MCMS, ASP, VB, Bus. Obj, 
Erwin, C#, XML, WinRunner 
on Unix/Windows. 40h/w, 8- 
5. BS in Eng’g/Bus field, 2yr 
wk exp in job or any posit’n 
w/ Vignette, JDK, Cobol 
Resume to GBS at Chicago, 
reddy@genesisincorp.com 
fax: 317-579-1445 


Want a new 
IT career? 


Check out our jobs 
in the combined 
CareerJournal.com 


database. 
www.itcareers.com 


- 
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NET or Java/J2EE 
Application Developers 


ThoughtWorks is a global, rapid- 
ly-growing application develop- 
ment firm looking for NET and 
Java/J2EE developers for its 
Chicago, Nash New York. 
and San Francisco offices. We 
build highly complex, high busi- 
ness value applications for 
Global-1000 clients. .NET/Java 
J2EE developers must have a 
minimum of a Master of Science 
degree in Computer Sci, Com- 
puter Engineering, Computer 
Info Systems, Elec Engineering 
or a related field. Must have at 
least 6 mos of exp inci analysis 
design, coding & implementation 
of large scale, complex OO 
applications. Must be open to 
possible extensive travel 


For .NET devs, delivery exp on 
an actual C#/.NE roject wi 
integration w/3rd party applica 
tions & non-Microsoft technolo- 
gies is essential & development 
exp using Microsoft languages & 
toois, such as COM+, ASP.NET. 
ADO.NET, Enterprise Services. 
etc. J2EE devs must have deliv- 
ery exp as a programmer, ana- 
lyst or engineer on a large-scale 
J2EE application. Exp must incl 
OO design & design patterns. 
Pls E-mail res to 
work@thoughtworks.com 


-NET or Java/J2EE 
Application Developers 


ThoughtWorks is a global, rapid- 
ly-growing application develop- 
ment firm looking for NET and 
Java/J2EE developers for its 
Chicago, Nashville, New York 
and San Francisco offices. We 
build highly complex, high busi- 
ness value applications for 
Global-1000 clients. .NET/Java 
/J2EE developers must have a 
minimum of a Bach degree in 
Computer Sci, Computer Engin- 
eering, Computer Info Systems. 
Elec Engineering or a related 
field. Must have at least 3 yrs of 
exp incl analysis, design, coding 
& implementation of large scale. 
complex OO applications. Must 
be open to possible extensive 
travel 

For .NET devs, delivery exp on 
an actual C#/.NET project w/in- 
tegration w/3rd party applica- 
tions & non-Microsoft technolo- 
gies is essential & must have at 
least 1.5 yrs of development exp 
using Microsoft languages & 
tools, such as COM+, ASP.NET, 
ADO.NET, Enterprise Services. 
etc. J2EE devs must have deliv- 
ery exp as a programmer, ana- 
lyst or engineer on a large-scale 
J2EE application. Exp must 
incl OO design & design pat- 
terns. Pls E-mail res to 
work@thoughtworks.com 


Infosys Technologies Ltd, 
a world leader in soft- 
ware consulting seeks 
qualified candidates at 
our offices in Quincy, MA; 
Fremont, CA; & Lisle, IL: 
Bus Dev Mgr, Bus Dev 
, Bus Sys Anal, 
Proj Lead, Sr Sys Anal, & 
Prog/Sys Anal. Contact: 
HR, INFY Two Adams PI, 
Quincy, MA 02169 or: 
careers_usa@infy.com. 
WWW. Infy.com 


Cityon Systems has openings 
in Plano, TX & other locations 
throughout the US for pro- 
grammer analysts, software 
engineers, DBA's with work- 
ing knowledge in: INFORMIX, 
UNIX, SAP 4.6c & 4.7, BAPI, 
ABAP/4, MicroStrategy, 7i 
Oracle 8i, PowerBuilder, or 
Peoplesoft 8.x. Bachelor's in 
CS, Engineering, Math or 
related & 2 years exp. req'd. 
Excellent benefits. Send con- 
fidential resume to: HR, 
Cityon Systems, 2000 N 
Central Expy, Ste. 115, Piano, 
TX 75074. 


IT|careers 


Computer Scientist 


Responsible for R&D of hard- 
ware & software formal verifica- 
tion framework. Duties include 
design & implementation of for- 
mal specification language, new 
automated verification algo- 
rithms; overall system infrastruc- 
ture; perform research in formal 
methods area; write research 
papers & technical reports. This 
Position requires Ph.D. in CS 
with doctoral dissertation em- 
phasis in software engineering & 
formal methods for analysis & 
verification of software & hard- 
ware systems. Research back- 
ground to include: design, imple- 
mentation; use of model check- 
ers, static analyzers, compilers. 
software verification; implemen- 
tation & design skills including 
object technology; programming 
skills including C++, Scheme 
Emacs-Lisp, & Java; working 
knowledge of automatic theorem 
proving & formal semantics of 
programming languages. This 
position is located in Menio 
Park, CA. Please apply, indicat- 
ing job# 2251, via our website @ 
www.sri.com or mailing address 
at 333 Ravenswood Ave, Menio 
Park, CA 94025. Attn: Employ- 
ment Dept. EOE/AA 


Engineer, Senior Software - 
Speech Recognition Applica- 
tions: Develop, improve and 
maintain human-computer inter- 
face software for medical appli- 
cations. Requires: Master's or 
Ph.D. degree in CS, EE 
Computational Linguistics or 
equiv. plus 2 yrs. exp. as Sr. S/W 
Eng. - SR, or Research Assi- 
stant, Speech Scientisi, Engi- 
neer, or equiv. working in indus- 
trial s/w development environ- 
ment; strong coding skills in 
C/C++; strong speech recogni- 
tion exp. using HMM approach 
comfort with multiple platforms. 
especially Linux and Windows 
excellent writing and verbal 
skills; embedded programming 
experience; signal processing 
knowledge. F/T. 


Must be able to work without 
employer sponsorship. Send 
resume to: Kari Storz Imaging 
Attn HR CWw1104 175 
Cremona Dr., Goleta CA 93117 
or email 
jobs@ksimaging.com 

M/F/V/D. Principals only. 


A position is available for a Soft- 
ware Engineer in Columbus 
Ohio with a software developer 
and supplier. The Software En- 
gineer will be primarily responsi- 
bie for product design, bug veri- 
fication, release testing, and 
beta support projects for finan- 
cial and accounting software 
which may require research and 
analysis. Candidates for this po- 
sition should possess a Bachel- 
ors degree in business, soft- 
ware engineering or computer 
science; at least 1 year's experi- 
ence developing financial soft- 
ware applications; and demon- 
strated knowledge of manage- 
ment information systems, sys- 
tems analysis and design 
accounting, finance, and opera- 
tions management. Apply by 
mail to: James Lenard, Mapics: 
Inc., 2800 Corporate Exchange 
Drive, Columbus, Ohio 43231 


Satya Marg Solutions Inc, Lon- 
donderry, NH needs experi- 
enced programmer Analysts 
having a Bachelors Degree or 
equivalent with two years of 
progressive work experience in 
client server technologies, de- 
veloping software applications 
using Oracle, SQL Server, 
VC++, VB, ASP, Developer 
2000 and Java. Knowledge of| 
Microsoft.Net technologies is a 
plus. 40 hour week, M-F, com- 
petitive salary and benefits. 
apply with resume to Satya 
marg Solutions Inc., Hr Depart- 
ment, 75 Gilcreast Rd, Suite 
200, Londondery, NH 03053 or 
email: HR@smsolutionsinc.com 
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Software Segment Leader 


For Melbourne, FL employment. 2 openings available. 40 nrs./wk 
8:00am-5:00pm. $65,000-$70,000/yr. Requirements: Bachelor's 
degree in Computer Science or Electrical Engineering. 3 yrs. work exp 
applying C++ & OOA/OOD techniques to the development of large 
scale software systems, including Unix platform. 3 yrs. work exp. that 
ncludes: managing & planning the complete software lifecycle, includ: 
ing conducting requirements analysis & use case generation; & the 
domain of railroad operations, strategic software outsourcing & sub- 
contract management. Duties: Software system engineering for the 
design & implementation of a next generation railroad dispatch sys 
tem. Responsibilities include systems & software engineering tasks 
Systems engineering tasks consist of: system analysis, including cus- 
tomer interface; system design; specification generation; use case 
development; system traceability development: & development of a 
unified model for train dispatching systems. Software engineering 
tasks consist of: software requirements analysis; architecture imple- 
mentation; software analysis/design (including scenario, interaction 
sequence & state diagrams); & implementation of a train dispatching 
system. Work closely w/the customer & software engineers in develop 
ing & tracking system & subsystem level requirements, developing & 
mairitaining internal & external interface control documents, & verify- 
ing that all requirements have been tested successfully. To apply send 
resume to Agency for Workforce Innovation, P.O. Box 10869 
Tallahassee, FL 32302, Re-JOFL # 2566337 & JOFL # 2557471 


IT PROFESSIONALS, BUSI 
NESS DEVELOPMENT MAN- 
AGERS AND FINANCIAL PRO. 
FESSIONALS 

Majesco Software, Inc., a lead. 
ing software consulting compa- 
ny, seeks computer profession- 
als, IT Business Development 
Managers, and financial profes. 
sionals/accountant. For our 
computer-related positions, we 
are seeking Programmer, 
Analysts, Systems Analysts. 
Business Systems Analysts 
Network Engineers and 
Software Engineers. Technical 
positions require a Bachelor's 
degree or higher in a related 
field and/or relevant industry 
experience. We are also recruit- 
ing for IT Business Development 
and Account Managers to man- 
age existing accounts and all 
aspects of sales/business devel- 
opment for the company's U S 
operations. These positions 
require at least a bachelor's 
degree in either a technica! field 
or a business-related field and 
experience in related positions 
such as IT Account Mgr. Or 
Sales/IT Mgr. We also need 
financial expert/accountant with 
computer systems experience 
All positions are subject to relo- 
cation to various sites through- 
out the United States. Qualified 
applicants respond by mail to 
HR Department Majesco 
Software, Inc., 2035 Lincoln 
Highway, Suite 3002, Edison, NJ 
08817. Please specify position 
applying for on envelope. 


Software Engineer. Design and 
implement SQL and Pert scripts- 
based components needed to 
provide access and manipula- 
tion of data in various data marts 
and enterprise data warehous- 
es. Document all design and 
development efforts for long 
term support; hold overall 
responsibility for component and 
work on project architecture to 
assure design and impiementa- 
tion are consistent with other 
parts of existing project and 
vision for future projects. Utilize 
UML tools to design solutions 
and document designs for oth- 
ers; test components to test har- 
ness level, including unit testing 
and reproducible automatic 
mechanism to validate. BS in 
Computer Science or related 
discipline and 4 yrs. experience 
in software development or data 
warehousing, including Java 
Java Beans and SML required 
8:00-4:45. $82,000/yr. Please 
submit resume to: Employment 
Security Commission, 3351 Cari 
Sandburg Ct. Raleigh, NC 
27610. Resume must include 
applicant's SS#, Job Order 
#NC7251828 and DOT code 
#030.062-010. 


Programmer Analyst 
(Micro/Web) - 
Multiple Openings 


Structured systems analysis. 
sign, development, testing, qu: 
ity assurance, implementation 
integration, maintenance and 
support of integrated client-serv- 
er based systems for business 
financial, banking, manufactur- 
ing and other commercial busi- 
ness application systems in a 
multi-hardware/multi-software 
environment using centralized or 
distributed rela al daiabase 
management systems, 4GLs 
(Fourth Generation Languages) 
and other GU! (Graphical User 
interface) front-end tools. An 
alysis, design and development 
of client-server applications us- 
ing object-oriented methodoio- 
gy. Bachelor's Degree (or equiv. 
alent) in Computer Science- 
Math/Engineering/Science/Busi 
ness-Commerce and 1 yr. expe- 
rience in job offered or as Soft 
ware Engineer/Systems Analyst 
are required. Must have appro- 
priate combination of skills as 
follows: 1 of A and 2 of B; or 2 of 
A and 1 of B; or 3 of A. A in- 
cludes Oracle, Sybase, Informix 
SQL Server, Pro Ss, Ingres 
Access and Proxy Server; and B 
nciudes PowerBuilder 
MS-Windows. u 

JAM, APT-SQL, SQL* 
FORMS, ESQL/C, GUPTA SQL 
Progress 4GL, Informix 4GL, In 
gres 4GL, C, Java, Lotus Notes 
HTML, CGi, IIS, ASP, Front 
Page, Perl and Java Develop- 
ment Kit (JDK); High mobility 
preferred. 40 hrs/week, 8 am - 5 
pm. $66,533 - $78,000 per year. 
Qualified applicants should con- 
tact or send r me to 
Armstrong County CareerLink 
ATTN: CL Program Supervisor, 
1270 North Water Street, PO 
Box 759, Kittanning, PA 16201 
0759. Refer to Job Order # WEB 
466922 


Computer Scientist 


Responsible for performing ba- 
sic research in intelligent agent 
systems & applying the results 
to challenging real-world prob- 
lems. Responsibilities wil! in- 
clude managing maintenance & 
extension of existing BD! (Belief 
Desire Intention) agent software 
& leading research efforts in the 
area of robustness for agent 
systems. Requires PhD in com- 
puter science with doctoral re- 
search & dissertation emphasis 
in BDI agent systems plus five 
years experience in the applica- 
tion of BDI agent systems to 
real-world problems. Requires 
Publication record in BDI sys- 
tems. Background must include 
theoretical foundations of BDI 
agent systems; programming in 
Prolog, Python, Java, and Lisp 
software engineering project 
leadership experience. This 
position is located in Menlo 
Park, CA. Please apply, indicat- 
ing job# 2263, via our website @ 
www.sri.com or mailing address 
at 333 Ravenswood Ave, Menio 
Park, CA 94025. Attn: Employ- 
ment Dept. EOE/AA 
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Continued from page 1 
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Audit 


Interwoven that it was in com- 
pliance with the TeamSite li- 
censing agreement, the pur- 
chasing manager added. A 
spokesman for Interwoven 
said the company wouldn’t 
comment on whether it was 
sending such letters to cus- 
tomers. 

The financial services firm 
isn’t alone. Lawrence A. 
Husick, a partner at Lipton, 
Weinberger & Husick, an in- 
tellectual property law firm in 
Malvern, Pa., said he has been 
contacted by several clients 
recently who have received 
similar letters from software 
vendors that he declined to 
identify, except to call them 
“the usual suspects.” 

Husick said he doesn’t be- 


Microsoft LCS Security 


lieve that the letters represent 
an honest effort among ven- 
dors to meet Sarbanes-Oxley 
regulatory requirements — a 
sentiment shared by several IT 
asset managers attending the 
conference. 

“Vendors will use every tool 
they have at their disposal to 
increase revenues — they’re 
not doing this for their own 
| [Sarbanes-Oxley] compliance 
requirements,” he added. 


Vendor Defense 

Jenny Schuchert, vice presi- 
dent of program development 
at Akron, Ohio-based Inter- 
national Association of IT As- 
set Managers Inc. (IAITAM), 
disagreed. 

Schuchert said she hadn’t 
previously heard about the let- 
ters but wouldn’t be surprised 
if software vendors were mail- 
ing them out. Many software 








vendors have poor record- 
keeping procedures and may 
need customers to conduct 
self-audits so the vendors can 
attest to the financial controls 
that support their sales activi- 
ties, she noted. 

“Regulators are on [ven- 
dors] to track their revenues, 
when the customer contracts 
were started, the size of the 
deals, etc.,” added Schuchert. 

Barbara Rembiesa, presi- 
dent of the [AITAM, the user 
group that sponsored the 
conference, said she spoke 


| Oxley-related self-audit re- 


| audits anytime, and they’re 


| their organizations haven't re- 


| “I think [software vendors] are 





with “a few” attendees there 
who have received Sarbanes- 


quests from software vendors. 
“Publishers can request self- 


within their rights to do it,” 
she said. 

But several conference at- 
tendees said they were irked 
by the approach, even though 


ceived such correspondence. 





doing this to get more people 
to conduct audits. It’s bogus,” 


said an IT asset manager at a 
large financial services firm 
in the Northeast who request- 
ed anonymity. 

Rod Anderson, a spokesman 
for Novell Inc. in Waltham, 
Mass., said the company has 
been sending letters to cus- 


| tomers “for a number of 
| years” requesting that they 
conduct self-audits. However, 


he said, Novell hasn’t sent cus- 


| tomers any letters containing 


references to Sarbanes-Oxley. 
A spokeswoman for Oracle 


Corp. said the vendor hasn't 
sent users such letters. Spokes- 
| men for IBM and Microsoft 


Corp. declined to comment for 


| this story. @ 50414 
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2 esa of the IAITAM talks 
about Sarb-Ox and licensing issues: 
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Features 


Drive Interest in Corporate IM 


Will enable users of popular messaging 
systems to communicate more safely 





BY TODD R. WEISS 
Microsoft Corp.’s new Live 
Communications Server 
(LCS) 2005 could prove to be 
a crucial ingredient in the 
spread of corporate instant 
messaging use, some users 
and analysts say. 

The offering, which is com- 
patible with most popular IM 
systems, has corporate users 
and vendors eyeing new op- 
portunities for more-secure 
messaging. 

Taylor Collyer, director of 
server marketing at Microsoft, 
said that when used with a 
special connectivity pack, LCS 
will allow more-secure interac- 
tion with users running Yahoo 
Inc.’s Yahoo Messenger, Amer- 
ica Online Inc.’s Instant Mes- 
senger and Microsoft’s MSN 
Messenger. Those IM commu- 


nications will be enabled in se- 
cure, encrypted messages, per- 
mitting LCS users to more 
safely communicate with users 
of the popular free IM clients. 
That’s important, Collyer said, 
because “people don’t want 
corporate secrets leaking out 
the back door.” 

LCS is due to ship in De- 
cember. In 2005, Microsoft will 
release a new IM client, code- 
named Istanbul, that will be 
the preferred client for LCS. 

Graham Lawlor, chairman of 
the New York-based Financial 
Services Instant Messaging 
Association (FIMA) and pro- 
gram manager of IM at New 
York-based Deutsche Bank, a 
heavy user of secure enter- 
prise IM, said the interoper- 
ability promised by LCS 2005 
| is a “pretty fundamental 











change in the industry, espe- 
cially coming from a company 
like Microsoft.” 

It will allow the broad user 
base of the free IM communi- 
ty to take advantage of the 
“richness of enterprise IM,” 
which offers more security 
and usability than free IM 
clients, Lawlor said. 

FIMA was created in 2002 to 
pressure vendors into stan- 
dardizing IM software to meet 
compatibility, security and oth- 


Enterprise 
IM Benefits 
Companies choose to buy 
IM systems instead of using 
free alternatives in order to 
get the following features: 
= Message logging 
= Network security 
= Regulatory compliance 


= Management control 





| er business IT needs [Quick- 
| Link 33724]. The FIMA lineup 


includes Bank of America, Citi- 
group, Credit Suisse First 
Boston, Deutsche Bank, J.P. 
Morgan Chase & Co., Lehman 
Brothers Inc., Merrill Lynch & 
Co., Prudential Securities Inc. 
and UBS Warburg LLC. 

Some FIMA members have | 
been beta-testing LCS 2005, 
Lawlor said, and most are at 
least investigating the product 
for possible use. 

Mike Miller, director of sup- | 
port services for newspaper 
and television conglomerate 
Media General Inc. in Rich- 
mond, Va., said IM use at his 
company is still light; only 
about 100 out of some 8,000 
workers use an IT-endorsed 
system. Those workers use 
the free AOL IM client, with 
added security, logging, man- 
agement and control features 
provided by Waltham, Mass.- 
based IMlogic Inc.’s IM Man- 
ager software. 

Media General has looked 
at enterprise IM systems, but 
company officials agreed that 
there’s no need to act until user 
numbers grow, Miller said. 





Genelle Hung, an analyst at 


| The Radicati Group Inc. in 


Palo Alto, Calif., said corpo- 


| rate interest in IM is due, in 


some cases, to the technolo- 
gy’s “presence” feature, which 
enables users to see who is 
available and online. “It’s defi- 


| nitely picking up in terms of 


enterprise IM,” Hung said. 
Some companies are still not 
ready for enterprise IM pack- 
ages, though, and are using the 
free IM clients along with 
management tools from ven- 
dors like IMlogic, Akonix Sys- 
tems Inc. and FaceTime Com- 
munications Inc., she said. 

Joe Wilcox, an analyst at 
Jupiter Research in New York, 


said corporate interest in en- 
| 


terprise IM has grown be- 
cause of regulatory require- 
ments for message logging 
and concerns that public IM 
networks are unsafe. “For 
some retailers, I wouldn’t say 
it’s must-have,” Wilcox said. 
“But where there are people 
sitting at desks and co-work- 
ers are on another floor or 
in another city . . . the must- 
have increases dramatically.” 
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Offshore Dot-Bomb 


HY ARE WE OFFSHORING IT? I’ve puzzled over 
that question ever since I spent a day last month 
at a conference for lawyers on IT offshoring. The 
lawyers, of course, were focused on how to write 
good outsourcing contracts — struggling to fig- 
ure out how to deal with foreign laws, privacy, security, due dili- 
gence and all the other unfamiliar complications offshoring brings. 
But why go to all this effort for something that, for corporate IT at 
least, is really untried, uncertain terra incognita? And it finally hit 
me: IT offshoring agreements aren’t being done as conventional 
business deals on the usual business basis. 
They’re being done on faith. It’s like dot-com mania all over again. 


Don’t laugh. True, there’s none of the dot- 
com hoopla here. These days, most companies 
won't even talk publicly about their offshoring. 

But they’re doing it. And as with the rush to 
Web commerce, there’s more faith than fact 
driving the march to outsource — even though 
the numbers, the expertise and the experience 
aren’t there to justify that faith. 

With the dot-coms, we didn’t know whether 
a Web-based business model would work at all 
— or if it did, what kinds of businesses it would 
support. We didn’t know how fast business could 
shift to the Web, or whether dot-coms really 
could transform retailing. All we knew was that 
bits cost less than bricks, so we figured every- 
thing else must cost less on the Internet, too. 

A scrap of data, an untried business model 
and a lot of faith: That was the dot-com way, 
and we all chased it. 

And offshoring? We know offshore program- 
mers get paid less — they’re the bits-cheaper- 
than-bricks part of the scheme. 

But we don’t know what kinds of corporate 
IT projects can be effectively off- 
shored. Or what happens to quality 
levels as offshoring volume ramps 
up. Or whether outsourcing will 
leave us with the flexibility and 
agility to adjust to rapidly changing 
business conditions, take advantage 
of new market opportunities and 
quickly respond to new user needs. 

We don’t even know if we'd all 
be better off leaving offshoring be- 
hind in favor of component devel- 
opment, packaged applications and 
improved management tools. 

We just don’t have the experience 





to tell us those things. Or the expertise to 
choose the right projects to outsource and then 
successfully manage from half a world away. Or 
the project results — the hard numbers — to 
give us confidence in the decision to outsource. 

Then why all the IT outsourcing? It’s faith, 
not fact, that drives it: the faith of CEOs, CFOs 
and CIOs that there has got to be a better way 
to do IT, and offshoring might be it. 

Which explains why, as I learned at that con- 
ference, even though roughly half of offshoring 
projects fail, customers don’t bail. Instead, they 
renegotiate their deals. They have faith, and off- 
shoring gets a second chance. 

It explains why cultural and legal quirks get 
forgiven, complications are accepted and extra 
overhead — such as the cost of getting and 
keeping lawyers up to speed on how to write 
offshore outsourcing contracts — is taken in 
stride. Sure, these might be permanent prob- 
lems that will get worse. But they might just be 
teething pains that will work themselves out. 

Most of all, it explains why offshoring seems to 

march on regardless of logic or prac- 
tical considerations or early results. 

Yes, that bubble of faith in off- 
shoring will burst eventually. 
When that happens, as with the 
dot-coms, some offshoring ap- 
proaches will disappear and some 
will survive. Experience will let us 
sort it all out, and the offshoring 
that survives will seem a lot more 
sensible in hindsight. 

But until then, all we can do is 
struggle to figure it out — and 
hope we survive this offshoring act 
of faith. @ 50376 
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Need to deliver business services faster? 


Want a way to bring it all together? 
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Let BEA show you how to integrate 
your business processes through 
Service-Oriented Architecture. 


And find out how SOA ready your company is with a 


COMPLIMENTARY SOA READINESS ASSESSMENT Benchmark Report. 
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Service-Oriented Architecture. 

How this software design approach can greatly reduce the 
costs, time, and risks of business integration projects. How 
research shows that 75% of large enterprises will begin a 
Service-Oriented Architecture (SOA) implementation by 
2006. And how the world’s leading companies are already 


planning SOA deployments to: 


Rapidly implement new services without expensive development 
Reduce process complexity and leverage existing investments 
Adapt faster to changing needs 

Seamlessly connect people and business applications together 


But how do you evaluate your SOA options? Who can help you develop 
a plan? What benefits can you expect — and how soon can you expect 
them? Get answers and insights — including your own SOA Readiness 
Assessment Benchmark Report — at http://soa.bea.com/cwnov. 


SOA ON BEA 


# FASTER DELIVERY. Virgin Mobile USA turned to BEA 
WebLogic Platform™ to launch the nation’s first wireless service 





targeted to the youth market. Using SOA to deliver a self-service 
customer portal, Virgin Mobile launched its prepaid wireless service 
in seven months. 


SOA for faster delivery ¢ 


BEA: the choice for SOA. 


BEA is a world leader in enterprise 
application infrastructure software, 
makers of the first and only integrated 
platform for application development and 
integration. The BEA WebLogic Platform 
is a superior framework for SOA that 
streamlines the process of integrating 
business applications to more closely 
align IT with business objectives. 

So you can: 


Build and deploy self-service portals faster 
Leverage reusable components for speed 
and efficiency 

Avoid trade-offs between urgent business 
needs and long-term flexibility 


BEA is a leader in enterprise application 
infrastructure. Here’s why: 
Superior open-standards platform for SOA 
15,000 customers, including a majority of the 
Fortune Global 500 
Partner for 1,300 leading hardware makers, 
ISVs, SIs, and VARs 
Business Integration Journal's 2004 Vendor 
of the Year 
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Find out Plan with confidence. 
how ready you really are. Deploy with speed. 
Ready to reap the benefits of SOA? Using BEA for SOA based business 
Now you can find out how ready you integration delivers proven benefits: 
really are. Using our SOA Readiness 


Increased responsiveness: faster integration 
Assessment, you can see where your lets you deliver business services faster 


company ranks compared to industry Lower risk: open-standards-based framework 
bia 4 

averages and to your own peers. Just frees you from being locked into proprietary 

; : : solutions or expensive add-ons 

complete the online questionnaire and 


Higher productivity through reusable components 
within 24 hours, we’ll send you back a and easier-to-use development tools 
complete SOA Readiness Assessment 
Benchmark Report that you can use to: To obtain your ee 
COMPLIMENTARY Y 


Evaluate your own state of SOA readiness 
Assess your company’s SOA strengths and 


SOA Readiness 


esaiiiiaiais Assessment 
Support your SOA plans and implementation Benchmark 
strategies Report, go to: 


http://soa.bea.com/cwnov 


Act now. Don’t delay. Whether you’re already implementing 

SOA based business integration or just beginning to plan, 

BEA can help — with the technology, solutions, and implementation 
services that match your needs. 





Visit http://soa.bea.com/cwnov to receive your 
COMPLIMENTARY SOA READINESS ASSESSMENT Benchmark Report. 


Coes ems, Inc. ee Aaa soe oe registered trademarks of BEA Systems, Inc. BEA Wel oe ee ce healers: 
adem larks pa pet beporlbeengan eae t names sme subjec seved by third parties. 














You have to reconfigure your infrastructure. Got a second? 


The highly dependable HP BladeSystem features Intel” Xeon Processors. 


THE SOLUTION THE BENEFITS 


HP ProLiant BL30p Blade Server 
2 H2/7 


gs on acquisition cost 


rface for integrated remote management 


Contact HP today for a free IDC white paper: Adapting to Change: 
BladeSystem Moves into the Mainstream 


hp.com/go/Bladesmag]! 


1-800-282-6672 


invent option 5, mention code AUFE 


your local reseller 








